In a continuously variable transmission of an electric actuator system from which a hydraulic pressure generator such as an oil pump is excluded, it is necessary to cut off power supply to an actuator and turn a motor into an inoperative state similarly in a hydraulic actuator system in order to prevent unintended sudden acceleration or deceleration when a fail state is formed due to microcomputer failure of an electronic control device. As a result, a belt-slipping state occurs causing traveling failure. Thus, a master CPU (for control) and a slave CPU (for monitoring), which are configurations of an existing electronic control device are used. Both CPUs have monitoring functions configured to perform mutual monitoring. In addition, the existing electronic control device is also considered as a monitoring device via a network to provide a monitoring configuration among the three devices to accurately specify the failure part (CPU).

A control system includes a controller for controlling a control target and redundant devices accessible from the controller. The control system includes a feature quantity generation unit that generates a feature quantity from data associated with the redundant devices, an abnormality detection unit that determines whether an abnormality has occurred in one of the redundant devices based on the feature quantity generated by the feature quantity generation unit and a predetermined abnormality detection parameter, a switch unit that switches the redundant devices between a working mode and a standby mode when the abnormality detection unit determines that an abnormality has occurred, and a learning unit that performs machine learning using the data associated with the redundant devices to determine the abnormality detection parameter.

A multi-channel control system includes at least a primary control microprocessor and a back-up control microprocessor operable to control a device. The primary control microprocessor and the back-up control microprocessor assert control over a controlled device according to a locally stored method of controlling a back-up microprocessor assumption of control of a device.

A safety device includes a first computation unit, a second computation unit, an output control unit, and a first central processing device. The first computation unit is configured to perform a first computation on a detected value detected from a subject to be controlled, thus obtaining a first result value. The second computation unit is configured to perform a second computation on the detected value, thus obtaining a second result value which is to be determined if equal to the first result value. The output control unit is configured to output the first result value in a case that the second computation unit determines that the first result value is equal to the second result value, and not to output the first result value in a case that the second computation unit determines that the first result value is not equal to the second result value.

Meeting the safety requirements of automation systems in a more flexible manner, the invention provides a control and data transmission system for controlling safety-critical processes, comprising a plurality of I/O modules connected via a first communication network to a gateway module. The gateway module is connected to a second communication network hierarchically superior to the first communication network and acts as a gateway between the first and the second communication networks. At least one of the I/O modules comprises a diagnosis unit for generating status data relating to the functional state of an input and/or output and/or of a process device. The gateway module and the I/O modules communicate via the first communication network in a safe manner to transfer status data and input and/or output data. The gateway module performs safety processing of the status data and/or of the input and/or output data.

A method for improving a redundancy and an uptime in a SCADA network for controlling a well operation includes executing control systems for the well operation in identical virtual simulated environments on at least two servers, storing all data for the control systems in a designated redundant cluster storage system, and setting-up the at least two servers with a load balancing.

A multi-channel control system includes a first primary control microprocessor and a second primary control microprocessor operable to control a device, and a first secondary control microprocessor and a second secondary control microprocessor operable to control the device. Each of the first and second primary control microprocessors and the first and second secondary control microprocessors are arranged as an independent control channel.

Example control methods and apparatus are described. One example control method includes obtaining, by a first controller, a first operating status of the first controller before a control function of the first controller and/or a control function of a second controller are/is activated. The first controller receives first indication information sent by the second controller, where the first indication information indicates a controller status of the second controller. The first controller sets a first controller mode of the first controller based on the first operating status and the first indication information. Second indication information is sent by the first controller to the second controller, so that a first controller mode of the second controller that is set by the second controller does not conflict with the first controller mode of the first controller.