Siemens Aktiengesellschaft

Jürgen Laforsch

Thomas Grosch

Albert Renschler

Herbert Barthel

Norbert Becker

Hans-Joachim Beck

Dieter Helmig

Michael Schlemper

Ingo Landgraf

Stefan Weigel

Josef Ritzer

Georg Kleifges

Simone Thoneick

Bernhard Zistel

Klaus Freiberg

Ralph Luber

The real time capability is to be improved in a Cloud-based control system for an automation plant. To this end, a redundantly embodied, Cloud-based control system with a plurality of computing resources distributed over a network with control applications running thereon is proposed, which, embodied as a primary and backups, execute a control program almost simultaneously and send corresponding program instructions to the automation plant. Long transmission times of individual computing resources therefore do not have a negative effect on the control of the automation plant.

High-availability cloud-based automation solution with optimized transmission times

A method for operating a redundant automation system for controlling a technical process in which two-out-of-three system with three subsystems are operated, wherein a comparator is cyclically operated in each subsystem and compares the first, second and third output data with one another, and a respective comparator is operated such that, during each comparison in which the result is that all output data are approximately the same, no further action is performed, and during a comparison in which deviations between the output data are determined, that subsystem in which the deviations of its own output data from the other output data are the greatest is identified as faulty via a majority decision.

Redundant automation system and method for operating the redundant automation system

Method for setting up a redundant communication connection, and failsafe control unit, wherein a transport and/or networking functional unit of a communication device utilizes at least one communication network address associated with a primary control device and/or a secondary control device to set up two communication connections to a failsafe control unit that includes the primary control device and the secondary control device, where data transmitted via a first communication connection are forwarded from the primary control device to the secondary control device via a first synchronization connection such that data transmitted via a second communication connection are forwarded from the secondary control device to the primary control device via a second synchronization connection.

Method for setting up a redundant communication connection, and failsafe control unit

A plurality of hardware units of a redundant automation system each include a plurality of processor units that each execute a group of tasks, where groups of tasks executed on different hardware units receive the same input signals directly or indirectly from a managed industrial process, and determine the same output signals for the managed industrial process, where however, only the tasks of one of the groups executed on different hardware units each output their output signals to the managed industrial process, where the groups executed on different hardware units synchronize with one another via a respective communication link, and where the groups of tasks executed on the same hardware unit exchange data between themselves on a pair basis via a respective pair of intermediate storage units.

Method and redundant automation system with a plurality of processor units per hardware unit

A method for reproducing the sequence of a program provided for process control in an automation device, wherein a program that corresponds to the program in the automation device with regard to process control is provided for processing using a backup device, where suitable measures can be used to image the complete history of the automation device and to reproduce the sequence of the program so that with regard to the processing of the program, it becomes possible to subsequently and repeatedly approach any desired time in the past and to reproduce all associated data.

Method for reproducing the sequence of a program in an automation device

A method for operating an automation device having a CPU module that is configured to effect read or write access to local peripherals that are each provided with two interface modules that are each wired up in ring form to an input/output controller, wherein peripheral access operations are executed via one of the rings or via both rings, and wherein a redundancy manager that is provided for each ring is used to logically interrupt the respective ring in a normal mode and to initiate ring reconfiguration for this ring in the event of a physical ring interruption so as to provide a basis for allowing peripheral access operations during the actual period of this ring reconfiguration.

Method for operating an automation device to reduce dead time on account of a physical interruption in a ring or a failed unit

A redundant automation system having a plurality of automation devices which are connected to one another comprises a plurality of master devices and a slave device. Each of the plurality of automation devices processes a control program in order to control a technical process. At least one of the plurality of automation devices operates as a slave and at least two of the plurality of automation devices, each operates as a master. The plurality of master devices is each configured to run a respective master program and to process processing sections of the respective master program of the respective master program, and the slave device is configured to process a corresponding slave control program for each master control program run by the plurality of master devices and, if one of the plurality of master devices fails, to assume the function of the failed master.

Redundant automation system

A redundant automation system and a method for operating the redundant automation system which is provided with a first subsystem and a second subsystem that each process a control program while controlling a technical process, one of these subsystems operating as a master and the other subsystem operating as a slave, and the slave assuming the function of the master if the master fails such that it becomes possible to dispense with temporally synchronous communication between the participants with regard to the synchronization of the program processing in the two subsystems, thus reducing the communication load.

A method for operating an automation system having at least two subsystems which are each provided with a control program, wherein relevant data from one subsystem is transmitted to the other subsystem within the scope of an updating phase of the automation system to transfer process control from a solo mode of one of the subsystems to a redundant control mode with another of the subsystems so as to facilitate updating.

Method for operating a redundant automation system

A method of lifeboat monitoring between a first and a second communication device, wherein a first monitoring request is received by the second communication device from the first communication device, where the first monitoring request to has a first monitoring time. In addition, a first reception time is determined by the second communication device based on the first monitoring time, lifeboat signals are received by the second communication device from the first communication device, and an interruption in the communication connection to the first communication device is triggered by the second communication device if, during the first reception time following receipt by the second communication device of the last lifeboat signal, a new lifeboat signal from the first communication device is unreceived by the second communication device.

Method for performing lifebeat monitoring

The invention relates to a system for generating and displaying messages and/or alarms particularly in an automation system of a plant and/or process. The invention further relates to a corresponding method. Using the system and method, messages and/or alarms can easily be displayed differently depending on the state of a production plant or process.

Dynamic attributing of messages for message escalation

A device used for control or monitoring of a process is updated without interruption or exceeding upper response time limits for response to a change in the state of the process. If the updating task requires too much run time, the updating task is terminated. As soon as the updating task has been terminated, a configuration is established again with regard to the control or monitoring of the process, so that it is possible to respond again to changes in the state of the process.

Growing community of inventors

Bühl, Germany

Jürgen Laforsch