A programmable safety unit for monitoring and controlling safety functions of a hazardous environment, for example an environment including hazardous machines, processes, materials, and so forth and safety equipment associated with the hazardous environment. A safety unit is adapted for external mounting, and includes a programmable safety module and a connection part that are interconnectable enabling mounting/demounting and replacement of the programmable safety module and/or the connection part. The safety unit further includes at least two connections that are programmable as safe inputs and/or outputs for direct connection to at least a number of the safety functions or equipment of the hazardous environment, and for example the machines and/or processes.

A flight management assembly of an aircraft and method of monitoring the flight management assembly. The assembly includes two flight management systems, and a monitoring and backup unit, each of the flight management systems configured for generating data including a trajectory and a prediction of a parameter of the aircraft, one of the flight management systems being active and the other being passive, the monitoring and backup unit configured for carrying out monitoring of at least one of the items of data generated by the active flight management system in order to verify if the item of data is valid, the flight management assembly carrying out, in case of validation of the monitored item of data, a synchronization of the monitoring and backup unit and of the passive flight management system, with data called synchronization data of the active flight management system, namely a flight plan and/or a flight trajectory.

Controlling and communicating with separate sets of industrial process control devices via separate data protocols simultaneously with a single processing device that utilizes redundancy and task-splitting to increase availability. An exemplary system includes a device integrator processor configured to receive and transmit electronic data via a plurality of protocols simultaneously. In one form, the device integrator processor includes a primary module that primarily controls communications and synchronizes itself with a shadow module of the processor. In another form, the processor includes multiple cores that each control a set of devices. Moreover, the cores implement a redundancy scheme.

An industrial process control system comprises a primary controller coupled with a buffer and a primary memory. The primary controller is configured to create at least one redundant data type based on at least one base data type. The at least one redundant data type includes tracked operators that are different from corresponding operators of the at least one base data type. The tracked operators include an assignment function that is a same assignment function performed by the corresponding operators of the at least one base data type, and a transfer function. The primary controller is further configured to perform the assignment function on a piece of data to assign the piece of data to an address in the primary memory, perform the transfer function to transfer the piece of data to a buffer, and transfer contents of the buffer to a backup memory.

A programmable safety unit for monitoring and controlling safety functions of a hazardous environment, for example an environment including hazardous machines, processes, materials, and so forth and safety equipment associated with the hazardous environment. A safety unit is adapted for external mounting, and includes a programmable safety module and a connection part that are interconnectable enabling mounting/demounting and replacement of the programmable safety module and/or the connection part. The safety unit further includes at least two connections that are programmable as safe inputs and/or outputs for direct connection to at least a number of the safety functions or equipment of the hazardous environment, and for example the machines and/or processes.

This disclosure provides an automation controller method, system and apparatus including a redundant watchdog utilizing a safety partner controller. According to an exemplary controller, the controller includes a first processing unit, a second processing unit, and an integrated circuit configured to receive as inputs fault indicator signals from the first and second processing units, and the integrated circuit configured to disable I/O communications for a fault condition detected by the first or second processing units.

Controlling and communicating with separate sets of industrial process control devices via separate data protocols simultaneously with a single processing device that utilizes redundancy and task-splitting to increase availability. An exemplary system includes a device integrator processor configured to receive and transmit electronic data via a plurality of protocols simultaneously. In one form, the device integrator processor includes a primary module that primarily controls communications and synchronizes itself with a shadow module of the processor. In another form, the processor includes multiple cores that each control a set of devices. Moreover, the cores implement a redundancy scheme.

This disclosure provides an automation controller method, system and apparatus including a redundant watchdog utilizing a safety partner controller. According to an exemplary controller, the controller includes a first processing unit, a second processing unit, and an integrated circuit configured to receive as inputs fault indicator signals from the first and second processing units, and the integrated circuit configured to disable I/O communications for a fault condition detected by the first or second processing units.

This disclosure provides an automation controller method, system and apparatus including a redundant watchdog utilizing a safety partner controller. According to an exemplary controller, the controller includes a first processing unit, a second processing unit, and an integrated circuit configured to receive as inputs fault indicator signals from the first and second processing units, and the integrated circuit configured to disable I/O communications for a fault condition detected by the first or second processing units.

A multi-channel control system includes a first primary control microprocessor and a second primary control microprocessor operable to control a device, and a first secondary control microprocessor and a second secondary control microprocessor operable to control the device. Each of the first and second primary control microprocessors and the first and second secondary control microprocessors are arranged as an independent control channel.