Embodiments of this present disclosure may include a system with a first power converter and a control system. The first power converter may supply a first output power to a first backplane at least sometimes concurrent to a second power converter supplying a second output power to a second backplane. The control system may be electrically coupled to the first backplane and the second backplane. The control system may balance a first electrical property and a second electrical property provided to each of one or more load components electrically coupled to the first backplane and the second backplane.

Embodiments of this present disclosure may include a system with a first power converter and a control system. The first power converter may supply a first output power to a first backplane at least sometimes concurrent to a second power converter supplying a second output power to a second backplane. The control system may be electrically coupled to the first backplane and the second backplane. The control system may balance a first electrical property and a second electrical property provided to each of one or more load components electrically coupled to the first backplane and the second backplane.

Methods and systems for electronic engine control (EEC) systems are disclosed. An EEC monitors and controls operation of an end effector, such as a torque motor. The EEC is configured to command a switchover from an active channel to a standby channel, or vice versa, in response to a trigger (e.g., a command or a fault). The switchover is executed automatically upon identification of the trigger due to the detection of a fault without the need of a command, over a predetermined time or number of cycles within a command signal.

Methods and systems for electronic engine control (EEC) systems are disclosed. An EEC monitors and controls operation of an end effector, such as a torque motor. The EEC is configured to command a switchover from an active channel to a standby channel, or vice versa, in response to a trigger (e.g., a command or a fault). The switchover is executed automatically upon identification of the trigger due to the detection of a fault without the need of a command, over a predetermined time or number of cycles within a command signal.

A programmable electronic power regulator includes a power module for controlling an actuator, a control module for actuating the power module, and an internal monitoring module for transferring the control module to an emergency operation. The internal monitoring module is configured to monitor a system state, detect a critical operating state, and output an error signal. The control module comprises: a basic controller, which is configured to output a power module control signal, and in which functions for open- and closed-loop control of the actuator are implemented, which are required for an emergency operation in a critical operating state; an additional controller, in which functions that are not needed for emergency operation are implemented; and a controller disconnection point, which connects the basic controller with the additional controller via a control connection, and which is configured to at least partially disconnect the control connection upon receipt of the error signal.

Fault tolerance for an automation controller for a machine is provided. A first portion of phases of the automation controller may be processed with fail operational protection, in which a failure of one of the computers used for the first portion still permits full operational functionality in the machine. The remaining portion of the phases are processed with fail degraded protection, in which a failure of a computer used for the remaining portion permits continued operation but with one or more constraints, as compared to the fail operational portions.

The present invention is capable of realizing normal control of a control device and safe operation of a control target. In the present invention, an automatic control unit 10 generates a control output that is output to a control target in response to an input 1. A safety verification control unit 20 is configured to verify safety of the control output at a plurality of verification levels, and controls the control output on the basis of the verification result. A verification level selection unit manages the state related to the normality of the automatic control unit 10, and selects the verification level of the safety of the control output in the safety verification control unit 20 in accordance with the state.

The present invention is capable of realizing normal control of a control device and safe operation of a control target. In the present invention, an automatic control unit 10 generates a control output that is output to a control target in response to an input 1. A safety verification control unit 20 is configured to verify safety of the control output at a plurality of verification levels, and controls the control output on the basis of the verification result. A verification level selection unit manages the state related to the normality of the automatic control unit 10, and selects the verification level of the safety of the control output in the safety verification control unit 20 in accordance with the state.

Example control methods and apparatus are described. One example control method includes obtaining, by a first controller, a first operating status of the first controller before a control function of the first controller and/or a control function of a second controller are/is activated. The first controller receives first indication information sent by the second controller, where the first indication information indicates a controller status of the second controller. The first controller sets a first controller mode of the first controller based on the first operating status and the first indication information. Second indication information is sent by the first controller to the second controller, so that a first controller mode of the second controller that is set by the second controller does not conflict with the first controller mode of the first controller.

There is provided a control device that prevents the occurrence of an abnormality in control using artificial intelligence in the case where an abnormality occurs in another terminal that performs the control using the artificial intelligence. A control means (a first control unit) performs the control using artificial intelligence. The control means (second control unit) performs control different from the artificial intelligence. A control switching unit (a switching determination means, a switch) is configured to, when another terminal having the control means (the first control unit) is normal, cause the own control means (the first control unit) to perform the control using artificial intelligence, and when an abnormality occurs in another terminal having the control means (the first control unit), cause the control means (the second control unit) to perform the control different from artificial intelligence.