Meeting the safety requirements of automation systems in a more flexible manner, the invention provides a control and data transmission system for controlling safety-critical processes comprising a plurality of I/O modules connected via a first communication network to a gateway module. The gateway module is connected to a second communication network hierarchically superior to the first communication network and acts as a gateway between the first and the second communication networks. At least one of the I/O modules comprises a diagnosis unit for generating status data relating to the functional state of an input and/or output and/or of a process device. The gateway module and the I/O modules communicate via the first communication network in a safe manner to transfer status data and input and/or output data. The gateway module performs safety processing of the status data and/or of the input and/or output data.

A circuit is provided that has three clock sources, a first processing unit connected to the first clock source, a second processing unit connected to the second clock source, and an input unit. The first processing unit has a first logic circuit and a first memory circuit connected to the first logic circuit, wherein a first set of instructions, which is designed to implement a first control program when executed by the first logic circuit, is stored in the first memory circuit, wherein the first clock source specifies a clock timing of the execution of the first set of instructions. The second processing unit has a second logic circuit and a second memory circuit connected to the second logic circuit, wherein a second set of instructions, which is designed to implement a second control program when executed by the second logic circuit, is stored in the second memory circuit.

An I/O system having redundant removable and/or replaceable components. Each of the removable/replaceable components can be removed by displacement parallel to a common axis. An I/O device having an I/O base with a lock-out toggle to prevent installation of one or more I/O modules to the I/O base unless a ground screw has been secured to supporting structure.

A modular I/O system for an industrial automation network includes a network adapter including first and second adapter modules, wherein each adapter module is configured for connection with an industrial network. The I/O system further includes a first I/O device with first and second I/O modules each configured for operative connection to a controlled system for input/output of data with respect to the controlled system. The I/O system further includes first and second independent backplane data networks that connect each of the first and second adapter modules to each of the first and second I/O modules. The network adapter includes first and second removable backplane network switches and the first I/O device includes third and fourth removable backplane network switches that establish the backplane networks. The backplane network switches can be Ethernet gigabit switches.

An I/O system having redundant removable and/or replaceable components. Each of the removable/replaceable components can be removed by displacement parallel to a common axis. An I/O device having an I/O base with a lock-out toggle to prevent installation of one or more I/O modules to the I/O base unless a ground screw has been secured to supporting structure.

An industrial controller with a modular backplane includes multiple modules, where each module includes a base and a chassis. Electrical connectors located on each side of the base engage the base of an adjacent module such that the bases are electrically connected. The backplane is defined by and extends through each of the bases connected to each other. A chassis is inserted into each base. Each chassis includes an embedded switch and a local circuit. The embedded switch is in communication with the base, and the local circuit performs the operation of the corresponding module. The embedded switch receives data transmitted along the backplane between bases. The embedded switch reads the data intended for the module and passes the data to the local circuit for further processing. Similarly, the embedded switch receives data from the local circuit and inserts the data on the backplane for transmission to the appropriate module.

In a continuously variable transmission of an electric actuator system from which a hydraulic pressure generator such as an oil pump is excluded, it is necessary to cut off power supply to an actuator and turn a motor into an inoperative state similarly in a hydraulic actuator system in order to prevent unintended sudden acceleration or deceleration when a fail state is formed due to microcomputer failure of an electronic control device. As a result, a belt-slipping state occurs causing traveling failure. Thus, a master CPU (for control) and a slave CPU (for monitoring), which are configurations of an existing electronic control device are used. Both CPUs have monitoring functions configured to perform mutual monitoring. In addition, the existing electronic control device is also considered as a monitoring device via a network to provide a monitoring configuration among the three devices to accurately specify the failure part (CPU).

A method for producing a control system, in particular a driver assistance system, of a motor vehicle. The method includes the following steps: providing a first control unit, setting vehicle-specific operating parameters for the motor vehicle in the first control unit for its encoding, providing a second control unit and connecting in terms of signaling the second control unit to the first control unit, transmitting the encoding of the first control unit to the second control unit.

A multi-channel control system includes at least a primary control microprocessor and a back-up control microprocessor operable to control a device. The primary control microprocessor and the back-up control microprocessor assert control over a controlled device according to a locally stored method of controlling a back-up microprocessor assumption of control of a device.

An industrial controller with a modular backplane includes multiple modules, where each module includes a base and a chassis. Electrical connectors located on each side of the base engage the base of an adjacent module such that the bases are electrically connected. The backplane is defined by and extends through each of the bases connected to each other. A chassis is inserted into each base. Each chassis includes an embedded switch and a local circuit. The embedded switch is in communication with the base, and the local circuit performs the operation of the corresponding module. The embedded switch receives data transmitted along the backplane between bases. The embedded switch reads the data intended for the module and passes the data to the local circuit for further processing. Similarly, the embedded switch receives data from the local circuit and inserts the data on the backplane for transmission to the appropriate module.