A construction machine is provided with a control device having an operating panel with operating elements, which can assume numerous switching states/positions, a control and monitoring unit for controlling machine components via control signals signalling the switching state/position of associated operating elements, and a display/signal unit interacting with the control and monitoring unit. The control device provides first and second signal transmission paths for transmitting a first control signal signalling the switching state/position of a first operating element and a second control signal signalling the switching state/position of a second operating element, respectively. The control signals are checked for the existence of a plausibility criterion. If the plausibility criterion is not met, signal transmission over one or the other signal transmission path is deactivated, wherein the functionality of the relevant component is checked. Switching to emergency operation is only possible after confirmation of the functionality of the relevant component.

Systems, methods, and non-transitory computer readable media may be configured to facilitate usage of vehicle redundant processing resource. A primary processing resource may be dedicated to navigation control of a vehicle. A redundant processing resource may be provided for performing one or more tasks of the navigation control of the vehicle based on a failure of the primary processing resource. One or more available portions of the redundant processing resource may be used for performing one or more tasks of non-navigation control of the vehicle.

Systems, methods, and non-transitory computer readable media may be configured to facilitate usage of vehicle redundant processing resource. A primary processing resource may be dedicated to navigation control of a vehicle. A redundant processing resource may be provided for performing one or more tasks of the navigation control of the vehicle based on a failure of the primary processing resource. One or more available portions of the redundant processing resource may be used for performing one or more tasks of non-navigation control of the vehicle.

A blowout preventer system including a lower blowout preventer stack comprising a number of hydraulic components, and a lower marine riser package comprising a first control pod and a second control pod adapted to provide, during use, redundant control of hydraulic components of the lower blowout preventer stack where the first and the second control pods are adapted to being connected, during use, to a surface control system and to be controlled, during use, by the surface control system. The blowout preventer system further including at least one additional control pod connected to at least one additional surface control system and to be controlled, during use, by the additional surface control system.

A blowout preventer system including a lower blowout preventer stack comprising a number of hydraulic components, and a lower marine riser package comprising a first control pod and a second control pod adapted to provide, during use, redundant control of hydraulic components of the lower blowout preventer stack where the first and the second control pods are adapted to being connected, during use, to a surface control system and to be controlled, during use, by the surface control system. The blowout preventer system further including at least one additional control pod connected to at least one additional surface control system and to be controlled, during use, by the additional surface control system.

Method and network device for providing redundancy in an industrial network includes a first port group connected to a first network segment of the industrial network, and includes a switch module that has a plurality of southbound ports, wherein at least one southbound port is connected to a corresponding end device, where each port group has a pair of redundant northbound ports connected to a link redundancy entity having two or more interlinked ports connectable to one or more south-bound ports of switch module based on network topology for enabling redundant links between end devices connected to the southbound ports and the first network segment.

Methods and apparatus to implement safety applications associated with process control systems are disclosed. An apparatus includes a configuration controller to: provide a plurality of available safety applications for implementation by a safety trip device to a user for selection, a first one of the safety applications associated with a first set of I/O signals, a second one of the safety applications associated with a second set of I/O signals, the first safety application implemented based on first pre-programmed instructions stored in memory of the safety trip device, the second safety application implemented based on second pre-programmed instructions stored in the memory; and, in response to a user selection of the first safety application, prompt the user to specify values for configuration settings associated with the first safety application. The apparatus also includes an I/O analyzer to implement the first safety application.

Methods and apparatus to implement safety applications associated with process control systems are disclosed. An apparatus includes a configuration controller to: provide a plurality of available safety applications for implementation by a safety trip device to a user for selection, a first one of the safety applications associated with a first set of I/O signals, a second one of the safety applications associated with a second set of I/O signals, the first safety application implemented based on first pre-programmed instructions stored in memory of the safety trip device, the second safety application implemented based on second pre-programmed instructions stored in the memory; and, in response to a user selection of the first safety application, prompt the user to specify values for configuration settings associated with the first safety application. The apparatus also includes an I/O analyzer to implement the first safety application.

A software defined distributed control system (SDCS) in a process plant includes an application layer that includes a plurality of containers instantiated in a data cluster. Each of the containers is an isolated execution environment executing within the local operating system of a respective computing node. The containers cooperate to facilitate execution of a control strategy in the SDCS, and includes a hyper converged infrastructure (HCI) operating across the data cluster, which HCI is configured to communicate with the application layer via an adapter service. The HCI includes software-defined (SD) compute resources, SD storage resources, SD networking resources, and an orchestrator service. The orchestrator service is programmed to configure a first container to include a service executing within the first container. It also assigns the first container to execute on an available hardware resource to control a plurality of field devices operating in the process plant.

A process control system includes a plurality of field devices operating to control a process. A communication infrastructure couples the field devices to a software-defined control system (SDCS) that receives data from the field devices and transmits instructions to the field devices. A data cluster, executing the SDCS, includes a plurality of computing nodes, each of which includes a processor executing an operating system, a memory, and a communication resource coupled to one or more other computing nodes in the data cluster. First and second containers, each of which is an isolated execution environment, are instantiated on a first computing node within the operating system of the first computing node. The second container is instantiated within the first container. The first and second containers correspond to levels of a hierarchical structure of the SDCS.