An artificial intelligence (AI) system using a machine learning algorithm and an application thereof is provided. The method for controlling an electronic apparatus includes acquiring an output value by inputting an input value to a function module to perform a function corresponding to the function module included in the electronic apparatus, identifying a safety mechanism to be applied to the function module based on the input value and the output value, and detecting an error operation of the function module based on the identified safety mechanism.

A method for fail-safe provision of an analog output value for a control process designed for functional safety, wherein the output value is specified by a control unit as a digital output value and, in a first step, the digital output value is converted into the analog output value via a converter, in a second step, the analog output value is converted into a fail-safe digital output value using fail-safe criteria via a read-back device and, in a third step, the originally provided digital output value is compared with the converted fail-safe digital output value, where in the event of the comparison revealing a deviation or of a plausibility criterion being infringed, a safety action is performed, otherwise, the analog output value is output to the control process with the aid of a release device.

A circuit is provided that has three clock sources, a first processing unit connected to the first clock source, a second processing unit connected to the second clock source, and an input unit. The first processing unit has a first logic circuit and a first memory circuit connected to the first logic circuit, wherein a first set of instructions, which is designed to implement a first control program when executed by the first logic circuit, is stored in the first memory circuit, wherein the first clock source specifies a clock timing of the execution of the first set of instructions. The second processing unit has a second logic circuit and a second memory circuit connected to the second logic circuit, wherein a second set of instructions, which is designed to implement a second control program when executed by the second logic circuit, is stored in the second memory circuit.

An apparatus and a method for the parallel and independent operation of a normal program and a secure program on the basis of a runtime system structure have all components that are relevant to the control integrated on a hardware component with a specific hardware architecture and be isolated from one another by a runtime system structure for two dual runtime systems for making changes to non-security-relevant components without restriction. The isolation can be provided by prioritizing one of the runtime systems. Such a runtime system structure or hardware architecture eliminates the need for follow-up certification of user-programmable controllers and the certification of the security-critical component is valid even when changes to the non-security-relevant components are made.

A safety controller module for providing safety control comprises a non-volatile memory configured for storing a safety control program and one or more processing units configured to execute safety control functions associated with the safety control program to provide independent safety control. The safety controller module further comprises a connector configured to communicatively couple the safety controller module with a non-safety controller. The safety controller module is configured to communicate an input and/or an output signal of the safety controller module via the connector to the non-safety controller.

A safety network for supporting one or more devices in intermittent use, the safety network being susceptible of verification and/or validation as a safety loop and including a safety controller configured to assess the integrity of the safety network, and monitor safety sensors and cause safety actuators to respond to any detected safety events in accordance with safety rules.

The safety network implements safety representatives, each configured to maintain a virtual representation of an associated device in intermittent use, including at least one virtual safety sensor and/or virtual safety actuator, make the virtual representation available for integrity assessment and monitoring by the safety controller, and perform wireless data synchronization between the virtual representation and the associated device.

The virtual representation further includes an activation indicator, which determines a safety rule for the safety controller's monitoring and/or for the safety representative's data synchronization.

A safety controller module for providing safety control comprises a non-volatile memory configured for storing a safety control program and one or more processing units configured to execute safety control functions associated with the safety control program to provide independent safety control. The safety controller module further comprises a connector configured to communicatively couple the safety controller module with a non-safety controller. The safety controller module is configured to communicate an input and/or an output signal of the safety controller module via the connector to the non-safety controller.

A method and system for safely switching off an electrical load in a system comprising a multi-channel control unit, a single-channel data transmission path and an output unit having a first processing unit, a second processing unit and safe outputs. The method comprises receiving and evaluating an input signal by the multi-channel control unit and generating an enable signal based on the evaluation; transmitting the enable signal to the output unit via the single-channel data transmission path; receiving the enable signal by the first processing unit and generating an output signal based on the enable signal; providing at least one part of the enable signal from the first processing unit to the second processing unit for evaluation therewith; generating a dynamic clock signal by the second processing unit based on the enable signal; and controlling the safe outputs based on the output signal and the dynamic clock signal.

This disclosure provides an automation controller method, system and apparatus including a redundant watchdog utilizing a safety partner controller. According to an exemplary controller, the controller includes a first processing unit, a second processing unit, and an integrated circuit configured to receive as inputs fault indicator signals from the first and second processing units, and the integrated circuit configured to disable I/O communications for a fault condition detected by the first or second processing units.

This disclosure provides an automation controller method, system and apparatus including a redundant watchdog utilizing a safety partner controller. According to an exemplary controller, the controller includes a first processing unit, a second processing unit, and an integrated circuit configured to receive as inputs fault indicator signals from the first and second processing units, and the integrated circuit configured to disable I/O communications for a fault condition detected by the first or second processing units.