A method is provided for selecting a plurality of program functions for providing repeatedly implemented functions, e.g., in a vehicle, ship or in an aircraft. The method includes determining a first total performance value based on recorded first single performance values and recorded first dependencies, determining a first total performance value based on determined second single performance values and recorded second dependencies, determining a cluster performance from the first total performance value and from the second total performance value, and the cluster performance value or at least one value determined from the cluster performance value is used for selecting the program functions or of other program functions for providing the repeatedly implemented functions.

A method for processing data for an automated vehicle, including operating at least two processing units, the at least two processing units being monitored by a monitoring device having at least two self-monitoring monitoring units. Defined monitoring of the processing units is carried out with the aid of the at least two monitoring units. A master functionality of the monitoring units is assumed by a defined monitoring unit. In the event of a fault of the monitoring unit carrying out the master functionality, the master functionality is taken over by a downstream monitoring unit.

The invention relates to an engine control device comprising a first control channel (V1) and a second control channel (V2), each control channel comprising a first sensor (CAV1, CAV2) and a second sensor (CBV2, CBV2), each configured to provide, respectively, a first measurement (A) and a second measurement (B) to each channel, each of the channels having an active or passive state defining an active channel (V1) or a passive channel (V2), the active channel (V1) being designed to control at least one actuator (ACT) of the engine while the passive channel (V2) is designed to take over for the active channel if the latter fails.

According to one embodiment, a system includes control apparatus and server. Control apparatus includes collector, transmitter, receiver and main controller. Collector collects sensing data concerning control targets in social infrastructure. Transmitter transmits collected sensing data to server. Receiver receives control instruction from server. Main controller controls control targets based on control instruction. Server includes acquisition unit, database, generator and instructor. Acquisition unit acquires sensing data from control apparatus. Database stores sensing data. Generator generates control instruction by processing sensing data. Instructor transmits generated control instruction to control apparatus.

A safety device includes a first computation unit, a second computation unit, an output control unit, and a first central processing device. The first computation unit is configured to perform a first computation on a detected value detected from a subject to be controlled, thus obtaining a first result value. The second computation unit is configured to perform a second computation on the detected value, thus obtaining a second result value which is to be determined if equal to the first result value. The output control unit is configured to output the first result value in a case that the second computation unit determines that the first result value is equal to the second result value, and not to output the first result value in a case that the second computation unit determines that the first result value is not equal to the second result value.

The present invention discloses a method for controlling a process using a plurality of regulatory controllers (160) connected to a remote supervisory controller (120) over a communication link (155) and to a local supervisory controller (130) over a process bus (170). The remote supervisory controller (120) controls the regulatory controllers (160) over the communication link (155) with the use of a remote process model. During operation of the plant a local process model is configured in the local supervisory controller (130) with control data send on the communication link (155). Upon failure of the communication link (155) the local supervisory controller (130) takes over the control through the process bus (170), acting as a redundant or a backup controller. The method comprises: monitoring transmission of control data between the remote supervisory controller (120) and the plurality of controllers (160) over the communication link (155); determining functional correlations between measured process variables and control process variables, based on the control data and a predetermined correlation function; configuring local process model based on the determined functional correlations; and providing intermediate set points using the configured local process model, upon an intermediate failure of the communication link (155), where the communication link recovers from the intermediate failure within a predetermined time period.

A device for failsafe monitoring a number of passes of a moving machine part through a defined movement region comprising an input for receiving an encoder signal, which represents a motion value of the moving machine part. The device further comprises a failsafe evaluation unit for providing a failsafe shutdown signal as a function of the number of passes of the moving machine part through the defined movement region. The failsafe evaluation unit is configured to determine the number of passes of the moving machine part through the defined movement region from the motion value.

A method is provided for selecting a plurality of program functions for providing repeatedly implemented functions, e.g., in a vehicle, ship or in an aircraft. The method includes determining a first total performance value based on recorded first single performance values and recorded first dependencies, determining a first total performance value based on determined second single performance values and recorded second dependencies, determining a cluster performance from the first total performance value and from the second total performance value, and the cluster performance value or at least one value determined from the cluster performance value is used for selecting the program functions or of other program functions for providing the repeatedly implemented functions.

According to one embodiment, a system includes control apparatus and server. Control apparatus includes collector, transmitter, receiver and main controller. Collector collects sensing data concerning control targets in social infrastructure. Transmitter transmits collected sensing data to server. Receiver receives control instruction from server. Main controller controls control targets based on control instruction. Server includes acquisition unit, database, generator and instructor. Acquisition unit acquires sensing data from control apparatus. Database stores sensing data. Generator generates control instruction by processing sensing data. Instructor transmits generated control instruction to control apparatus.

A manually operated motor-driven working device has a user-operated operating unit and a motor control circuit. The motor control circuit includes a control unit, configured to receive a motor operating signal from the operating unit and to generate a motor control signal on the basis thereof, a motor function enabling unit, configured to generate a motor function enable signal on the basis of a supplied enable control signal, and a redundancy control circuit, implemented as a discrete electrical circuit and configured to receive the motor operating signal and the motor control signal and to generate the enable control signal on the basis thereof.