Siemens Aktiengesellschaft

Albert Renschler

Thomas Grosch

Jürgen Laforsch

Peter Becker

Michael Abert

Juergen Laforsch

Jurgen Kuhlers

The real time capability is to be improved in a Cloud-based control system for an automation plant. To this end, a redundantly embodied, Cloud-based control system with a plurality of computing resources distributed over a network with control applications running thereon is proposed, which, embodied as a primary and backups, execute a control program almost simultaneously and send corresponding program instructions to the automation plant. Long transmission times of individual computing resources therefore do not have a negative effect on the control of the automation plant.

High-availability cloud-based automation solution with optimized transmission times

A method for operating a redundant automation system for controlling a technical process in which two-out-of-three system with three subsystems are operated, wherein a comparator is cyclically operated in each subsystem and compares the first, second and third output data with one another, and a respective comparator is operated such that, during each comparison in which the result is that all output data are approximately the same, no further action is performed, and during a comparison in which deviations between the output data are determined, that subsystem in which the deviations of its own output data from the other output data are the greatest is identified as faulty via a majority decision.

Redundant automation system and method for operating the redundant automation system

Method for setting up a redundant communication connection, and failsafe control unit, wherein a transport and/or networking functional unit of a communication device utilizes at least one communication network address associated with a primary control device and/or a secondary control device to set up two communication connections to a failsafe control unit that includes the primary control device and the secondary control device, where data transmitted via a first communication connection are forwarded from the primary control device to the secondary control device via a first synchronization connection such that data transmitted via a second communication connection are forwarded from the secondary control device to the primary control device via a second synchronization connection.

Method for setting up a redundant communication connection, and failsafe control unit

A plurality of hardware units of a redundant automation system each include a plurality of processor units that each execute a group of tasks, where groups of tasks executed on different hardware units receive the same input signals directly or indirectly from a managed industrial process, and determine the same output signals for the managed industrial process, where however, only the tasks of one of the groups executed on different hardware units each output their output signals to the managed industrial process, where the groups executed on different hardware units synchronize with one another via a respective communication link, and where the groups of tasks executed on the same hardware unit exchange data between themselves on a pair basis via a respective pair of intermediate storage units.

Method and redundant automation system with a plurality of processor units per hardware unit

A method with which one subsystem of a redundant automation system that is provided with a first subsystem and a second subsystem is operated as a master and another subsystem is operated as a slave, where the subsystems are provided with transmission and reception tasks to transmit and receive messages, and where messages are also interchanged with program path synchronization during a temporally asynchronous run through a program path in the master and the slave.

Method for operating a redundant automation system

A method for reproducing the sequence of a program provided for process control in an automation device, wherein a program that corresponds to the program in the automation device with regard to process control is provided for processing using a backup device, where suitable measures can be used to image the complete history of the automation device and to reproduce the sequence of the program so that with regard to the processing of the program, it becomes possible to subsequently and repeatedly approach any desired time in the past and to reproduce all associated data.

Method for reproducing the sequence of a program in an automation device

A method for operating an automation device having a CPU module that is configured to effect read or write access to local peripherals that are each provided with two interface modules that are each wired up in ring form to an input/output controller, wherein peripheral access operations are executed via one of the rings or via both rings, and wherein a redundancy manager that is provided for each ring is used to logically interrupt the respective ring in a normal mode and to initiate ring reconfiguration for this ring in the event of a physical ring interruption so as to provide a basis for allowing peripheral access operations during the actual period of this ring reconfiguration.

Method for operating an automation device to reduce dead time on account of a physical interruption in a ring or a failed unit

A redundant automation system having a plurality of automation devices which are connected to one another comprises a plurality of master devices and a slave device. Each of the plurality of automation devices processes a control program in order to control a technical process. At least one of the plurality of automation devices operates as a slave and at least two of the plurality of automation devices, each operates as a master. The plurality of master devices is each configured to run a respective master program and to process processing sections of the respective master program of the respective master program, and the slave device is configured to process a corresponding slave control program for each master control program run by the plurality of master devices and, if one of the plurality of master devices fails, to assume the function of the failed master.

Redundant automation system

A redundant automation system and a method for operating the redundant automation system which is provided with a first subsystem and a second subsystem that each process a control program while controlling a technical process, one of these subsystems operating as a master and the other subsystem operating as a slave, and the slave assuming the function of the master if the master fails such that it becomes possible to dispense with temporally synchronous communication between the participants with regard to the synchronization of the program processing in the two subsystems, thus reducing the communication load.

A method for operating an automation system having at least two subsystems which are each provided with a control program, wherein relevant data from one subsystem is transmitted to the other subsystem within the scope of an updating phase of the automation system to transfer process control from a solo mode of one of the subsystems to a redundant control mode with another of the subsystems so as to facilitate updating.

A method for configuring or reconfiguring an automation device and an automation device suitable for a configuration or a reconfiguration are provided. The automation device has a programmable controller () with a CPU unit () and decentralized peripheral devices (). In this method and automation device, newly supplied configuration data can be evaluated for changes in the hardware configuration and can be integrated during a configuration or a reconfiguration interval () without the automation device having to switch to a STOP mode. As a result, it is not necessary for centralized and/or decentralized peripheral modules to adopt a controlled (safe) state, which means that control can be resumed immediately after the reconfiguration.

Method for reconfiguring an automation device

A method and an engineering system that reduce the configuration complexity with regard to a possible expansion of the automation device are provided. The automation device includes slave units and a master unit () connected to the slave units via a bus. The slave units include one or more slave units () and one or more reserve slave units (). The configuration of a reserve slave unit () enables the master access time interval () and the slave access time intervals () to be expanded for a possible expansion of the automation device. As a result, a configured automation device of this type can be expanded by an additional slave unit without additional configuration or reconfiguration.

Growing community of inventors

Ettlingen, Germany

Albert Renschler