EP1685451A1 - Redundantes automatisierungssystem zur steuerung einer tech-n ischen einrichtung sowie verfahren zum betrieb eines derar-ti gen automatisierungssystems - Google Patents

Redundantes automatisierungssystem zur steuerung einer tech-n ischen einrichtung sowie verfahren zum betrieb eines derar-ti gen automatisierungssystems

Info

Publication number
EP1685451A1
EP1685451A1 EP03785521A EP03785521A EP1685451A1 EP 1685451 A1 EP1685451 A1 EP 1685451A1 EP 03785521 A EP03785521 A EP 03785521A EP 03785521 A EP03785521 A EP 03785521A EP 1685451 A1 EP1685451 A1 EP 1685451A1
Authority
EP
European Patent Office
Prior art keywords
automation
devices
master
automation device
data
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
EP03785521A
Other languages
German (de)
English (en)
French (fr)
Inventor
Dieter Kleyer
Wolfgang Ott
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Siemens AG
Original Assignee
Siemens AG
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Siemens AG filed Critical Siemens AG
Publication of EP1685451A1 publication Critical patent/EP1685451A1/de
Ceased legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B19/00—Programme-control systems
    • G05B19/02—Programme-control systems electric
    • G05B19/04—Programme control other than numerical control, i.e. in sequence controllers or logic controllers
    • G05B19/042—Programme control other than numerical control, i.e. in sequence controllers or logic controllers using digital processors
    • G05B19/0428—Safety, monitoring
    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B19/00—Programme-control systems
    • G05B19/02—Programme-control systems electric
    • G05B19/04—Programme control other than numerical control, i.e. in sequence controllers or logic controllers
    • G05B19/05—Programmable logic controllers, e.g. simulating logic interconnections of signals according to ladder diagrams or function charts
    • G05B19/058—Safety, monitoring
    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B2219/00—Program-control systems
    • G05B2219/10—Plc systems
    • G05B2219/12—Plc mp multi processor system
    • G05B2219/1213—All plc send their input to a common image memory, output directly send out
    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B2219/00—Program-control systems
    • G05B2219/10—Plc systems
    • G05B2219/14—Plc safety
    • G05B2219/14131—Workby plc, all plc function in parallel, synchronous data exchange
    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B2219/00—Program-control systems
    • G05B2219/20—Pc systems
    • G05B2219/24—Pc safety
    • G05B2219/24186—Redundant processors are synchronised
    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B2219/00—Program-control systems
    • G05B2219/20—Pc systems
    • G05B2219/24—Pc safety
    • G05B2219/24187—Redundant processors run identical programs
    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B2219/00—Program-control systems
    • G05B2219/20—Pc systems
    • G05B2219/24—Pc safety
    • G05B2219/24189—Redundant processors monitor same point, common parameters
    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B2219/00—Program-control systems
    • G05B2219/20—Pc systems
    • G05B2219/24—Pc safety
    • G05B2219/24197—Dual analog output ports, second takes over if first fails
    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B2219/00—Program-control systems
    • G05B2219/20—Pc systems
    • G05B2219/25—Pc structure of the system
    • G05B2219/25428—Field device

Definitions

  • Redundant automation system for the control of a technical device as well as method for the operation of such an automation system
  • the invention relates to a redundant automation system for controlling a technical device and a method for operating such an automation system, at least two automation devices being present. A first of these automation devices is operated as a master automation device and a second of the automation devices as a stand-by automation device.
  • so-called high-availability automation systems for example SIMATIC S-7 H from Siemens, are known in the prior art, in which practically all components, including the storage and power supply units, are redundant, so that in the event of an error, a Automation device can be switched to another, identically constructed automation device without interruption.
  • the automation devices are synchronized with one another with regard to their command execution, so that in both automation devices the same data are processed completely in parallel and the same commands are executed. So it is possible that a stand-by automation device operated in this way takes over the function of a faulty master automation device.
  • PLCs programmable logic controllers
  • the invention is therefore based on the object of specifying an automation system of the type mentioned at the outset, which is of simpler construction and in which, in particular, standard components from personal computer technology can be used to the greatest possible extent.
  • the invention is based on the idea that one of the most important preconditions for the realization of a redundant automation system to provide a current data base that describes the state of 'technical equipment and the automation system, can be seen. Switching from the master automation device to the standby automation device without noticeable delay can only be achieved if both automation devices have the same current data available at the time an error occurs, so that switching to the reserve device immediately and without "Data jumps" is possible.
  • both automation devices are constructed identically and, among other things, each include a memory unit, into which, due to the instruction-synchronous processing already described, the same data is written and the same data is read out.
  • the present invention provides that although two automation devices are present, only one common storage unit is provided for them, to which both automation devices have write and read access.
  • the implementation effort is considerably reduced in relation to the prior art, since on the one hand only one storage unit is necessary and on the other hand consequently the required synchronization effort between several storage units of the automation devices is eliminated.
  • a bumpless switchover means that the switchover from the master to the reserve automation device (stand-by automation device) takes place practically without any effect on the input and output signals of the automation system, so that in particular controls are continued at exactly the point where at which the faulty automation device canceled the control.
  • the reserve automation system must therefore have so-called initial values at the time the control is taken over stand, which relate to the past of the control process (this includes in particular control algorithms that have an integral and / or differential component).
  • the present invention solves the problem of a current database for the automation devices in that only one common storage unit is provided for this.
  • a solution for realizing such a memory unit in PC technology in an automation system according to the invention includes, for example, the use of so-called “reflective memories", which are available as commercially available PC modules.
  • the reflective memory module is located, for example, in the address space of the shared memory of the computers involved in a network. Then data can be written directly into this memory area from any automation level, in particular also from user software, and read out from this memory area. Data that the local computer writes in this "reflective memory” is then automatically available to all other computers in parallel and without a time delay.
  • a monitoring module is also provided, by means of which the Operation of the master automation system can be monitored and, in the event of an error in the master automation device, switching to the stand-by automation device is possible, which then takes over the function of the previous master automation device.
  • the device function is monitored, including error detection.
  • the monitoring module includes the evaluation of a so-called sign of life of the master automation device, e.g. A characteristic value is changed for each cycle of the check if the master automation device is functional. If this characteristic value is not changed during a cycle, this is an indication of an error in this automation device and the monitoring module carries out the switchover to the assigned stand-by automation device.
  • Possible errors which prevent a change in the mentioned characteristic value include, for example, hardware errors and / or operating system errors and / or user software errors.
  • such state data are present in the common memory area, which describe the current operating state of the technical device and the automation system immediately before the time of an error of the master automation device.
  • the status data should in particular include such data which correspond to initial values of control algorithms, so that the standby automation device also knows the history of the relevant control processes by means of these initial values and the relevant controls are continuously carried out by the standby automation device can.
  • the status data include such input and output data of the technical device, which are recorded by the automation system and / or sent to the technical device. All of this data is referred to as a process image.
  • the switchover is particularly advantageously effected in a bum-free manner, in that at least some of the data present in the common memory area is immediately processed further by the stand-by automation device as a current status image of the technical device and the automation system.
  • switching between the master automation device and the stand-by automation device takes place practically without delay while the control of the technical device is continuously continued by the stand-by automation device.
  • the invention further leads to a method for operating a redundant automation system for controlling a technical device with the features of independent claim 5.
  • FIG shows a redundant automation system according to the invention.
  • the figure shows a redundant automation system 1 according to the invention, which comprises automation devices 3a, 3b.
  • a first automation device is designed as a master automation device 3a, which takes over the control of a technical device.
  • the signals from the technical device and the control commands to the technical device are processed by field devices 17 and transmitted to the automation devices 3a, 3b via a fieldbus 15.
  • a second automation device is available, which is designed as a stand-by automation device 3b and can take over the control tasks of the first automation device 3a.
  • a monitoring module 23 is provided for error detection and switching from the first automation device 3a to the second automation device 3b. Among other things, this evaluates a life sign 25 of the first automation device 3a and in the event of an error switches over to the second automation device 3b, which then takes over the control tasks of the previous master automation device 3a.
  • the automation devices 3a, 3b each have a CPU
  • this writing process 21 is carried out by the second automation device 3b; this is indicated in the figure by a dashed connection from the second automation device 3b to the fieldbus 15.
  • a memory unit 9 is assigned to both automation devices 3a, 3b, to which both automation devices 3a, 3b have access.
  • Status data of the automation devices 3a, 3b are essentially stored in this storage unit, the storage unit 9 comprising at least one memory area which can be written and read by both automation devices 3a, 3b. In this way, at least the data present in this memory area are made available to the automation devices 3a, 3b in parallel. Since the two automation devices 3a, 3b thus use a common database in the form of the memory unit 9 add, to which they each have access, in the event of an error in the master automation device 3a, there is no memory comparison between the automation devices 3a and 3b, at least as far as the comparison of the above-mentioned status data is concerned.
  • Status data of the automation devices 3a, 3b include all data that describe a current operating status of the automation devices 3a, 3b, such as, for example, the current values of the signals transmitted from the technical device to the automation devices (process image), the current values of the master automation device the technical device transmitted signals and commands and, if necessary, current initial values of control algorithms, which include at least one differentiating and / or integrating control element.
  • Knowing the current initial value is important at the time an error occurs in the master automation device, so that the previous stand-by automation device can continue to apply the relevant controls continuously, in particular without a change in a controlled variable.
  • the memory unit 9 is preferably designed as a so-called “reflective memory” module, which is available as a module for use with personal computers. Physically, this module is preferably installed in one of the automation devices 3a, 3b, the data that this automation device contains in the Module writes, then it is also available to all other automation devices.
  • this module is preferably installed in one of the automation devices 3a, 3b, the data that this automation device contains in the Module writes, then it is also available to all other automation devices.
  • the present invention can be described as follows:
  • a redundant automation system (1) In a redundant automation system (1) according to the invention and a method for operating such an automation system (1), two automation devices (3a, 3b) are provided, to which a common memory unit is assigned, to which status data the automation devices (3a, 3b) can be stored ,
  • the automation devices (3a, 3b) thus have direct access to a common database and there is no need for a memory comparison in the event of an error when switching to the standby automation device (3b).

Landscapes

  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Engineering & Computer Science (AREA)
  • Automation & Control Theory (AREA)
  • Hardware Redundancy (AREA)
  • Safety Devices In Control Systems (AREA)
EP03785521A 2003-11-17 2003-11-17 Redundantes automatisierungssystem zur steuerung einer tech-n ischen einrichtung sowie verfahren zum betrieb eines derar-ti gen automatisierungssystems Ceased EP1685451A1 (de)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/DE2003/003793 WO2005052703A1 (de) 2003-11-17 2003-11-17 Redundantes automatisierungssystem zur steuerung einer tech­nischen einrichtung sowie verfahren zum betrieb eines derar­tigen automatisierungssystems

Publications (1)

Publication Number Publication Date
EP1685451A1 true EP1685451A1 (de) 2006-08-02

Family

ID=34624717

Family Applications (1)

Application Number Title Priority Date Filing Date
EP03785521A Ceased EP1685451A1 (de) 2003-11-17 2003-11-17 Redundantes automatisierungssystem zur steuerung einer tech-n ischen einrichtung sowie verfahren zum betrieb eines derar-ti gen automatisierungssystems

Country Status (7)

Country Link
US (1) US20070128895A1 (zh)
EP (1) EP1685451A1 (zh)
JP (1) JP2007511806A (zh)
CN (1) CN1879068A (zh)
AU (1) AU2003294628A1 (zh)
DE (1) DE10394366D2 (zh)
WO (1) WO2005052703A1 (zh)

Families Citing this family (28)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1591849A1 (de) * 2004-04-27 2005-11-02 Siemens Aktiengesellschaft Redundantes Automatisierungssystem umfassend ein Master- und ein Stand-by-Automatisierungsgerät
US20080123522A1 (en) * 2006-07-28 2008-05-29 David Charles Elliott Redundancy coupler for industrial communications networks
DE102006047026B4 (de) * 2006-10-02 2011-02-24 Phoenix Contact Gmbh & Co. Kg Verfahren und System zum redundanten Ansteuern einer Slaveeinrichtung
EP2034411A1 (de) * 2007-09-06 2009-03-11 Siemens Aktiengesellschaft Verfahren zum Austausch eines elektrischen Geräts mit Parametrierdaten durch ein Ersatzgerät
EP2133764B1 (de) * 2008-06-09 2012-10-17 Siemens Aktiengesellschaft Fehlersicheres Automatisierungssystem und Verfahren
CN101651756B (zh) * 2008-08-14 2012-09-05 中兴通讯股份有限公司 呼叫中心容灾系统及实现方法、呼叫中心
CN101340272B (zh) * 2008-08-25 2012-12-19 中兴通讯股份有限公司 一种双机切换方法及系统
EP2256868A1 (de) * 2009-05-27 2010-12-01 Siemens Aktiengesellschaft Automatisierungsgerät mit einem Terminalmodul
US8228009B2 (en) * 2009-07-27 2012-07-24 Parker-Hannifin Corporation Twin motor actuator
DE102010039607B3 (de) * 2010-08-20 2011-11-10 Siemens Aktiengesellschaft Verfahren zum redundanten Steuern von Prozessen eines Automatisierungssystems
GB2497017B (en) * 2010-08-20 2018-05-23 Siemens Ag Method for redundantly controlling processes of an automation system
EP2434358B1 (de) * 2010-09-27 2017-07-19 Siemens Aktiengesellschaft Verfahren zum Betreiben eines redundanten Systems und System
DE102011081184A1 (de) * 2011-08-18 2013-02-21 Siemens Aktiengesellschaft Verfahren zum Schalten in einer Anordnung von Leistungsschaltern sowie Anordnung aus einer Mehrzahl von Leistungsschaltern
AT12998U1 (de) * 2012-01-12 2013-03-15 Bachmann Gmbh Redundantes steuerungssystem sowie steuerrechner und peripherieeinheit
FR2986881B1 (fr) * 2012-02-15 2014-08-29 Schneider Electric Ind Sas Procede d'election de l'equipement maitre actif parmi deux equipements maitres redondants
CN103684839B (zh) * 2012-09-26 2018-05-18 中国移动通信集团四川有限公司 一种用于双机热备的数据传输方法、系统及服务器
DE102013201831A1 (de) * 2013-02-05 2014-08-07 Siemens Aktiengesellschaft Verfahren und Vorrichtung zum Analysieren von Ereignissen in einem System
DE102013106954A1 (de) * 2013-07-02 2015-01-08 Phoenix Contact Gmbh & Co. Kg Verfahren zur Fehlerüberwachung, Steuer- und Datenübertragungsanlage und Steuereinrichtung
US9912733B2 (en) 2014-07-31 2018-03-06 General Electric Company System and method for maintaining the health of a control system
EP3026513B1 (de) * 2014-11-28 2018-01-03 Siemens Aktiengesellschaft Redundantes Automatisierungssystem und Verfahren zum Betrieb
EP3051373B1 (de) * 2015-02-02 2019-05-08 Siemens Aktiengesellschaft Auswechseln einer defekten Anlagenkomponente in einer Automatisierungsanlage
CN105207874A (zh) * 2015-09-02 2015-12-30 中国联合网络通信集团有限公司 一种l2tp网络保护的方法及网络系统
CN106054752B (zh) * 2016-08-15 2018-08-31 南京亚派科技股份有限公司 基于fpga的有源电力滤波器控制系统及其切换方法
EP3428748B1 (de) * 2017-07-13 2020-08-26 Siemens Aktiengesellschaft Verfahren und anordnung zum betrieb von zwei redundanten systemen
CN112639640B (zh) * 2018-09-05 2024-07-05 西门子股份公司 冗余热备控制系统、控制设备、冗余热备方法及计算机可读存储介质
DE102018121885A1 (de) * 2018-09-07 2020-03-12 Phoenix Contact Gmbh & Co. Kg Elektronisches Gerät zum Einsatz in einem Automatisierungssystem sowie ein Automatisierungssystem
EP3647888B1 (de) * 2018-10-31 2021-07-14 Siemens Aktiengesellschaft Steuerungsverbund und verfahren zum betrieb des steuerungsverbundes
EP3751363B1 (de) * 2019-06-11 2022-11-23 Siemens Aktiengesellschaft Verfahren zum betreiben eines redundanten automatisierungssystems und entsprechendes system

Family Cites Families (15)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE3215177A1 (de) * 1982-04-23 1983-10-27 Hartmann & Braun Ag, 6000 Frankfurt Ueberwachungssystem fuer eine oder mehrere, gleichartig aufgebaute prozessstationen
US4872106A (en) * 1983-04-06 1989-10-03 New Forney Corp. Industrial process control system with back-up data processors to take over from failed primary data processors
US5590181A (en) * 1993-10-15 1996-12-31 Link Usa Corporation Call-processing system and method
JPH086854A (ja) * 1993-12-23 1996-01-12 Unisys Corp アウトボードファイルキャッシュ外部処理コンプレックス
US5464435A (en) * 1994-02-03 1995-11-07 Medtronic, Inc. Parallel processors in implantable medical device
JP3491780B2 (ja) * 1994-12-07 2004-01-26 株式会社安川電機 産業用ロボットにおけるリード線処理構造
DE19624302A1 (de) * 1996-06-18 1998-01-02 Siemens Ag Aufdatverfahren
US5912814A (en) * 1997-05-07 1999-06-15 Allen-Bradley Company, Llc Redundant multitasking industrial controllers synchronized data tables
US5984504A (en) * 1997-06-11 1999-11-16 Westinghouse Electric Company Llc Safety or protection system employing reflective memory and/or diverse processors and communications
US6178522B1 (en) * 1998-06-02 2001-01-23 Alliedsignal Inc. Method and apparatus for managing redundant computer-based systems for fault tolerant computing
US6477139B1 (en) * 1998-11-15 2002-11-05 Hewlett-Packard Company Peer controller management in a dual controller fibre channel storage enclosure
ES2208609T3 (es) * 2000-05-18 2004-06-16 Siemens Aktiengesellschaft Componente periferico con una alta seguridad frente a errores para controles programables con memoria.
GB2369690B (en) * 2000-11-29 2002-10-16 Sun Microsystems Inc Enhanced protection for memory modification tracking
US20020161907A1 (en) * 2001-04-25 2002-10-31 Avery Moon Adaptive multi-protocol communications system
US7003688B1 (en) * 2001-11-15 2006-02-21 Xiotech Corporation System and method for a reserved memory area shared by all redundant storage controllers

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See references of WO2005052703A1 *

Also Published As

Publication number Publication date
DE10394366D2 (de) 2006-10-19
US20070128895A1 (en) 2007-06-07
WO2005052703A1 (de) 2005-06-09
JP2007511806A (ja) 2007-05-10
AU2003294628A1 (en) 2005-06-17
CN1879068A (zh) 2006-12-13

Similar Documents

Publication Publication Date Title
EP1685451A1 (de) Redundantes automatisierungssystem zur steuerung einer tech-n ischen einrichtung sowie verfahren zum betrieb eines derar-ti gen automatisierungssystems
DE3781486T2 (de) Verfahren zur stossfreien umschaltung von aktiven einheiten zu ersatzeinheiten in datenverarbeitungsanlagen und datenverarbeitungsanlage zur durchfuehrung dieses verfahrens.
EP1743225A1 (de) Redundantes automatisierungssystem umfassend ein master- und ein stand-by-automatisierungsgerät
EP1860564A1 (de) Verfahren und Vorrichtung zum Austausch von Daten auf Basis des OPC-Kommunikationsprotokolls zwischen redundanten Prozessautomatisierungskomponenten
DE2317576A1 (de) Einrichtung zur ausfallbedingten umordnung von speichermoduln in einer datenverarbeitungsanlage
DE102017109886A1 (de) Steuerungssystem zum Steuern von sicherheitskritischen und nichtsicherheitskritischen Prozessen mit Master-Slave-Funktionalität
EP1358554B1 (de) Automatische inbetriebnahme eines clustersystems nach einem heilbaren fehler
EP1043641A2 (de) Fehlersicheres Automatisierungssystem mit Standard-CPU und Verfahren für ein fehlersicheres Automatisierungssystem
EP1238318A1 (de) Automatisierungsgerät und aufdat-verfahren
WO2000020970A1 (de) Speicherprogrammierbare steuerung mittels datenverwaltung über netzrechner und verfahren zum betrieb einer speicherprogrammierbaren steuerung
DE19842593C2 (de) Verfahren zum Betrieb eines Busmasters an einem Feldbus
DE19983975B3 (de) Programmierbares Steuersystem und Rücksetz-Steuerverfahren für das programmierbare Steuersystem
EP2228723B1 (de) Verfahren zur Fehlerbehandlung eines Rechnersystems
DE10014390C2 (de) Hochverfügbares Rechnersystem und Verfahren zur Umschaltung von Bearbeitungsprogrammen eines hochverfügbaren Rechnersystems
EP3872583B1 (de) Redundant ausgelegtes automatisierungssystem
EP0404992B1 (de) Verfahren zum hochverfügbaren Betrieb von redundanten Datenverarbeitungsanlagen
EP1283471B1 (de) Programmgesteuerte Einheit
EP3872582A1 (de) Redundant ausgelegtes automatisierungssystem
DE3751374T2 (de) Verfahren und Mechanismus zum unabhängigen Sicherstellungsmodustransfer für digitale Steuerprozessoren.
DE10025085A1 (de) Modul zur Steuerung oder Regelung von sicherheitsrelevanten Vorgängen oder Abläufen für den Betrieb von Maschinen oder Anlagen
EP0108284B1 (de) Taktstromversorgung für ein Multimikrocomputersystem in Eisenbahnsicherungsanlagen
EP1433061A2 (de) Verfahren zum überprüfen eines rechnerkerns eines mikroprozessors oder eines mikrocontrollers
DE69119351T2 (de) System zur Schaltsteuerung zwischen Normal und Ersatz
DE3239434C1 (de) Einrichtung zum Überwachen der Funktionsfähigkeit eines Mehr-Rechnersystems
EP3229141A1 (de) Verfahren zur erhöhung der verfügbarkeit eines redundanten automatisierungssystems sowie redundantes automatisierungssystem

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20060516

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IT LI LU MC NL PT RO SE SI SK TR

DAX Request for extension of the european patent (deleted)
17Q First examination report despatched

Effective date: 20070726

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION HAS BEEN REFUSED

18R Application refused

Effective date: 20091124