Siemens Aktiengesellschaft

Siements Aktiengesellschaft

Thomas Grosch

Maximilian Walter

Albert Renschler

Jürgen Laforsch

Jan Richter

Juergen Laforsch

Walter Maximilian

Hans-Jürgen Arbogast

The real time capability is to be improved in a Cloud-based control system for an automation plant. To this end, a redundantly embodied, Cloud-based control system with a plurality of computing resources distributed over a network with control applications running thereon is proposed, which, embodied as a primary and backups, execute a control program almost simultaneously and send corresponding program instructions to the automation plant. Long transmission times of individual computing resources therefore do not have a negative effect on the control of the automation plant.

High-availability cloud-based automation solution with optimized transmission times

A method for operating a redundant automation system for controlling a technical process in which two-out-of-three system with three subsystems are operated, wherein a comparator is cyclically operated in each subsystem and compares the first, second and third output data with one another, and a respective comparator is operated such that, during each comparison in which the result is that all output data are approximately the same, no further action is performed, and during a comparison in which deviations between the output data are determined, that subsystem in which the deviations of its own output data from the other output data are the greatest is identified as faulty via a majority decision.

Redundant automation system and method for operating the redundant automation system

A method for creating a redundant automation system, a computer program and a computer-readable medium, wherein the redundant automation system includes at least one automation installation to be controlled that is installed at an installation location and two control applications that are communicatively interconnected via a synchronization path, and includes a plurality of communication hubs and communication paths connecting these to one another, where one of the control applications operates as the master and the other control application operates as a reserve, such that when the control application operating as the master fails, the control application operating as the reserve function as the master, and where the locations of the computing resources for the control applications are selected such that the control applications are connected to the at least one automation installation via two different communication paths preferably having no or a minimal number of common communication hubs.

Redundant automation system, method for creating the automation system, computer program and computer readable medium

Method for operating a redundant automation system to control a technical process, wherein a second fail-safe subsystem is operated redundantly in relation to a first fail-safe subsystem, and wherein the faulty second fail-safe subsystem is used, where synchronization data is initially buffered in the second subsystem, and in the event that no errors are identified, the first fail-safe subsystem sends an error-free message to the second fail-safe subsystem to acknowledge the error-free message with an error free acknowledgment and process the initially buffered synchronization data.

Method for operating a redundant automation system

Method for setting up a redundant communication connection, and failsafe control unit, wherein a transport and/or networking functional unit of a communication device utilizes at least one communication network address associated with a primary control device and/or a secondary control device to set up two communication connections to a failsafe control unit that includes the primary control device and the secondary control device, where data transmitted via a first communication connection are forwarded from the primary control device to the secondary control device via a first synchronization connection such that data transmitted via a second communication connection are forwarded from the secondary control device to the primary control device via a second synchronization connection.

Method for setting up a redundant communication connection, and failsafe control unit

A plurality of hardware units of a redundant automation system each include a plurality of processor units that each execute a group of tasks, where groups of tasks executed on different hardware units receive the same input signals directly or indirectly from a managed industrial process, and determine the same output signals for the managed industrial process, where however, only the tasks of one of the groups executed on different hardware units each output their output signals to the managed industrial process, where the groups executed on different hardware units synchronize with one another via a respective communication link, and where the groups of tasks executed on the same hardware unit exchange data between themselves on a pair basis via a respective pair of intermediate storage units.

Method and redundant automation system with a plurality of processor units per hardware unit

A method and an arrangement having redundant systems operating in parallel in a cyclic mode and reciprocally checking a result of the task of the other system on a regular basis, and wherein one system is selected or confirmed for the productive mode in the fault situation found, where a characteristic variable concerning an operating parameter is picked up for each of the systems in multiple/all cycles and used for updating statistical parameters, where at least when a disparity between results of the two systems is found, a current operating parameter is correlated with the statistical parameter for each system, and where the system for which the current operating parameter differs from the statistical parameter less is detected as the correctly operating system and used for the productive mode such that the degree of fault coverage can be increased and hence the availability of the overall system increased.

Method and arrangement for operating two redundant systems

To achieve an automatic adjustment of a monitoring time in an automation system with a first automation device and a second automation device, at least one of the two automation devices operates a measuring program. A desired ring interruption is carried out by the measuring program by blocking a ring port in order thus to provoke a ring reconfiguration that utilizes a reconfiguration time. The blockage of the ring port is canceled again after the reconfiguration time has elapsed. The ring port is blocked again if the ring port has been opened by the ring reconfiguration, and all routing tables are deleted. As a result of this, at least the peripheral units are triggered to learn new network routes. Runtimes of test telegrams are measured, and a maximum value of the measured runtimes is stored. The measured maximum value is used for a dynamic adjustment of the monitoring time.

Operating a highly available automation system

A method with which one subsystem of a redundant automation system that is provided with a first subsystem and a second subsystem is operated as a master and another subsystem is operated as a slave, where the subsystems are provided with transmission and reception tasks to transmit and receive messages, and where messages are also interchanged with program path synchronization during a temporally asynchronous run through a program path in the master and the slave.

A method for stipulating a starting time for an update for a control apparatus that controls at least one peripheral component in a process automation installation by producing control outputs is disclosed. The update requires at least one predetermined down time. The invention is based on a suitable starting time for performing an update in order to perform an update in the course of operation of a process automation installation without risk. The method involves detecting a current operating state for the at least one peripheral component, taking the detected operating state as a basis for using a controlled system model of the process to simulate what state trajectory the at least one peripheral component negotiates within the down time for a predetermined static control output, and checking whether the state trajectory lies exclusively within a range of admissible operating states, and, if appropriate, starting the update.

Update for an automation installation in the course of operation

A method for reproducing the sequence of a program provided for process control in an automation device, wherein a program that corresponds to the program in the automation device with regard to process control is provided for processing using a backup device, where suitable measures can be used to image the complete history of the automation device and to reproduce the sequence of the program so that with regard to the processing of the program, it becomes possible to subsequently and repeatedly approach any desired time in the past and to reproduce all associated data.

Method for reproducing the sequence of a program in an automation device

Regarding a method for operating an industrial controller, a control program executable in a processor that is arranged in the industrial controller is subdivided into a main block and several program blocks. The program blocks are processed under event control that takes a processing priority into consideration. The processor includes a multi-core processor having a plurality of independent sub-processors. The method includes assigning the main block to a first sub-processor, and executing a part program associated with the main block in the first sub-processor. The method also includes assigning each of the several program blocks to the additional sub-processors, and executing the part programs associated with the program blocks in the respective sub-processors. The method further includes operating a control device to evaluate as input variables the processing priority and an event assigned to the respective program block, and switching the sub-processors into active or inactive state using the evaluation.

Method for operating an industrial controller and industrial controller

A method for operating an automation device having a CPU module that is configured to effect read or write access to local peripherals that are each provided with two interface modules that are each wired up in ring form to an input/output controller, wherein peripheral access operations are executed via one of the rings or via both rings, and wherein a redundancy manager that is provided for each ring is used to logically interrupt the respective ring in a normal mode and to initiate ring reconfiguration for this ring in the event of a physical ring interruption so as to provide a basis for allowing peripheral access operations during the actual period of this ring reconfiguration.

Method for operating an automation device to reduce dead time on account of a physical interruption in a ring or a failed unit

A redundant automation system having a plurality of automation devices which are connected to one another comprises a plurality of master devices and a slave device. Each of the plurality of automation devices processes a control program in order to control a technical process. At least one of the plurality of automation devices operates as a slave and at least two of the plurality of automation devices, each operates as a master. The plurality of master devices is each configured to run a respective master program and to process processing sections of the respective master program of the respective master program, and the slave device is configured to process a corresponding slave control program for each master control program run by the plurality of master devices and, if one of the plurality of master devices fails, to assume the function of the failed master.

Redundant automation system

A redundant automation system and a method for operating the redundant automation system which is provided with a first subsystem and a second subsystem that each process a control program while controlling a technical process, one of these subsystems operating as a master and the other subsystem operating as a slave, and the slave assuming the function of the master if the master fails such that it becomes possible to dispense with temporally synchronous communication between the participants with regard to the synchronization of the program processing in the two subsystems, thus reducing the communication load.

Growing community of inventors

Roβtal, Germany

Thomas Grosch