An I/O server service interfaces with multiple containerized controller services each implementing the same control routine to control the same portion of the same plant. The I/O server service may provide the same controller inputs to each of the containerized controller services (e.g., representing measurements obtained by field devices and transmitted by the field devices to the I/O server service). Each containerized controller service executes the same control routine to generate a set of controller outputs. The I/O server service receives each set of controller outputs and forwards an “active” set to the appropriate field devices. The I/O server service may utilize a quality-of-service metric to determine which controller outputs and/or I/O channel is “active.” The I/O server service and other services, such as an orchestrator service, may continuously evaluate performance and resource utilization in the control system, and may dynamically activate and deactivate controller services as appropriate.

A process control system includes a plurality of field devices operating to control a process in a process plant. A communication infrastructure couples the plurality of field devices to a software-defined control system (SDCS) that receives data from the field devices and transmits instructions to the field devices. A data cluster, executing the SDCS, includes a plurality of compute nodes, each of which includes a processor executing an operating system, a memory, and a communication resource coupled to one or more other compute nodes in the data cluster. A plurality of instantiated containers, each of which is an isolated execution environment within the operating system of the compute node on which the container is instantiated, cooperate to facilitate execution of a control strategy in the SDCS. At least one of the containers in the SDCS is pinned to a component in the SDCS.

A software defined (SD) process control system (SDCS) includes a control container having contents which are executable during run-time of the process plant to control at least a portion of an industrial process. The SDCS also includes a security service associated with the control container and including contents which define one or more security conditions. The security service executes via a container on a compute node of the SDCS to control access to and/or data flow from the control container based on the contents of the security container.

A software defined (SD) process control system (SDCS) includes a method executed by a discovery service for inferring information regarding a physical or logical asset of a process plant. The method includes obtaining an announcement indicative of a presence of a physical or logical asset of the process plant. The method also includes obtaining, from a context dictionary, one or more parameters retrievable from the physical or logical asset or one or more services associated with the physical or logical asset that were not indicated in the announcement. Furthermore, the method includes storing a record of the discovered physical or logical asset in a discovered item data store. The record includes an indication of the identity of the physical or logical asset and the one or more parameters or one or more services associated with the physical or logical asset that were not indicated in the announcement.

Methods and apparatus relating to enhancing diagnostic capabilities of computing systems by combining variable patrolling Application Program Interface (API) and comparison mechanism of variables are described. In one embodiment, a first processor core executes a first instance of a workload to generate a first set of safety variables. A second processor core executes a second instance of the workload to generate a second set of safety variables. A third processor core generates a signal in response to comparison of the first set of safety variables and the second set of safety variables. Other embodiments are also disclosed and claimed.

An input circuit for reading in an analog input signal of a sensor comprises: first and second input ports connectable to the sensor; a first current-measuring signal converter connected to the first input port and comprising a current-measuring apparatus to determine a first output signal from the analog input signal; a current-limiting apparatus inside the first current-measuring signal converter for limiting a maximum current flowing through the first current-measuring signal converter; and a second current-measuring signal converter connected to the second input port and comprising a current-measuring apparatus to determine a second output signal from the analog input signal, wherein the first and second current-measuring signal converters are connected in series; and a testing apparatus for comparing the first and second output signals to detect faults of the first and second current-measuring signal converters in response to deviations between the first and second output signals exceeding a limit value.

An input circuit for reading in an analog input signal of a sensor comprises: first and second input ports connectable to the sensor; a first current-measuring signal converter connected to the first input port and comprising a current-measuring apparatus to determine a first output signal from the analog input signal; a current-limiting apparatus inside the first current-measuring signal converter for limiting a maximum current flowing through the first current-measuring signal converter; and a second current-measuring signal converter connected to the second input port and comprising a current-measuring apparatus to determine a second output signal from the analog input signal, wherein the first and second current-measuring signal converters are connected in series; and a testing apparatus for comparing the first and second output signals to detect faults of the first and second current-measuring signal converters in response to deviations between the first and second output signals exceeding a limit value.

Safety systems and material testing systems including safety systems are disclosed. An example material testing system includes: an actuator configured to control an operator-accessible component of the material testing system; an actuator disabling circuit configured to disable the actuator; and one or more processors configured to: control the actuator based on a material testing process; monitor a plurality of inputs associated with operation of the material testing system; determine, based on the plurality of inputs and the material testing process, a state of the material testing system from a plurality of predetermined states, the predetermined states comprising one or more unrestricted states and one or more restricted states; and control the actuator disabling circuit based on the determined state.

A system and method for detecting a failure in a redundant signal path during operation of the redundant path is disclosed. A test signal is sequentially injected into each signal path while an input signal is conducted by the other signal path not receiving the test signal. The test signal is selected at a frequency to verify operation of a filter connected in series along each path. A processor generates the test signal, injects the test signal at the input of the filter, and receives the output of the filter. The processor then generates a frequency response of the filter in each signal path as a function of the output from the filter and of the original test signal. The frequency response obtained along each of the redundant signal paths is compared to each other to detect a failure of one of the filters present along the respective signal paths.

A system and method for detecting a failure in a redundant signal path during operation of the redundant path is disclosed. A test signal is sequentially injected into each signal path while an input signal is conducted by the other signal path not receiving the test signal. The test signal is selected at a frequency to verify operation of a filter connected in series along each path. A processor generates the test signal, injects the test signal at the input of the filter, and receives the output of the filter. The processor then generates a frequency response of the filter in each signal path as a function of the output from the filter and of the original test signal. The frequency response obtained along each of the redundant signal paths is compared to each other to detect a failure of one of the filters present along the respective signal paths.