Rockwell Automation Technologies Incorporated

Nicholas Stay

Sivaram Balasubramanian

Mark A Flood

Anthony Gerard Gibart

Joseph P Izzo

Kyle E Neet

Chandresh R Chaudhari

Chad J Bohl

A system for communicating between redundant devices balances the desired attributes of a high availability (HA) control system and a safety control system. The system includes concurrent connections as a fault tolerant mechanism for industrial protocol connections at the transport layer. The concurrent connections establish multiple paths for redundancy from a data producer to a data consumer. Concurrent connections increase availability of the HA control and safety instrumented systems. More specifically, concurrent connections and architectural redundancies eliminate a single point of failure within the control system and further reduce safety connection timeouts during fault detection and/or recovery. Concurrent connections may be used to keep a HA system operational or to provide detection of a failure in a safety system. The industrial control network may be configured to function as a HA control system, as a safety control system, or with certain degrees of both HA and safety-related operation.

System and method of communicating safety data over high availability industrial control systems

An industrial controller executes a control program held in non-transitory medium to: (a) open connections for the communication of data on the industrial control network, the connection subject to a timeout; (b) operate in a synchronized state with the second industrial controller to execute a same control program to communicate same control data; (c) operate in an unsynchronized state providing no-operation data to the industrial control network, the no-operation data preventing timeout of the open connections on which it is communicated.

System and method of connection management during synchronization of high availability industrial control systems

Hardware memory management units are used in an integrated safety/non-safety industrial computer to allow shared memory architecture processors to implement safety and non-safety reduced risk of memory corruption. Testing of the memory management unit of the non-safety processor may provide a periodic writing to protected memory to invoke a protection fault providing a report to the safety processor.

Safety controller using hardware memory protection

Growing community of inventors

Milwaukee, WI, United States of America

Nicholas Stay