A control device (1) includes a master-information processing unit (10), and a slave-information processing unit (20) including an information processing CPU (220) that performs information processing through a general-purpose OS, and a distribution control CPU (210) that measures an operating state of the information processing CPU (220) through a real-time OS. The master-information processing unit (10) acquires, from the slave-information processing unit (20), information indicating the operating state of the information processing CPU (220) in the slave-information processing unit (20), determines, based on the acquired information, whether to request the slave-information processing unit (20) to perform information processing, and transmits, when determining to request the slave-information processing unit (20) to perform the information processing, a signal requesting the information processing to the slave-information processing unit (20). The information processing CPU (220) in the slave-information processing unit (20) performs the information processing upon receiving the signal requesting the information processing.

The controlling apparatus for an industrial product of this disclosure has a couple of microcomputers each of which has a CPU and a memory and each of which runs the same controlling program as well as the same diagnostic program sequence parallelly and simultaneously. After the CPU of the microcomputer writes the calculated result of the diagnostic program sequence in the predetermined area of the storing area for monitoring value, such CPU send the same calculated result to the other one of the microcomputers (receiving microcomputer). The CPU of the receiving microcomputer makes a diagnosis for finding whether or not the received result is identical with its own calculated result.

A control assembly for an aircraft system according to an example of the present disclosure includes a multi-core processor that has a plurality of cores coupled to a communications module and to an arbitration module. The communications module is operable to communicate information between the plurality of cores and one or more aircraft modules. The plurality of cores include first and second cores operable to concurrently execute a first discrete set of software instructions to generate respective instances of an output. The arbitration module is operable to communicate each and every one of the respective instances to control the one or more aircraft modules. A method of operating an aircraft system is also disclosed.

A circuit is provided that has three clock sources, a first processing unit connected to the first clock source, a second processing unit connected to the second clock source, and an input unit. The first processing unit has a first logic circuit and a first memory circuit connected to the first logic circuit, wherein a first set of instructions, which is designed to implement a first control program when executed by the first logic circuit, is stored in the first memory circuit, wherein the first clock source specifies a clock timing of the execution of the first set of instructions. The second processing unit has a second logic circuit and a second memory circuit connected to the second logic circuit, wherein a second set of instructions, which is designed to implement a second control program when executed by the second logic circuit, is stored in the second memory circuit.

The controlling apparatus for an industrial product of this disclosure has a couple of microcomputers each of which has a CPU and a memory and each of which runs the same controlling program as well as the same diagnostic program sequence parallelly and simultaneously. After the CPU of the microcomputer writes the calculated result of the diagnostic program sequence in the predetermined area of the storing area for monitoring value, such CPU send the same calculated result to the other one of the microcomputers (receiving microcomputer). The CPU of the receiving microcomputer makes a diagnosis for finding whether or not the received result is identical with its own calculated result.

Examples of techniques for configuring and parameterizing an energy control system are disclosed. In one example implementation according to aspects of the present disclosure, a computer-implemented method includes receiving, by a processing device, a plurality of digital twins. Each digital twin of the plurality of digital twins is associated with a component of a plurality of components. The method further includes computing, by the processing device, configuration and parameterization information for each of the plurality of components based at least in part on the plurality of digital twins. The method further includes transmitting, by the processing device, the configuration and parameterization information to respective components of the plurality of components to enable the plurality of components to implement the configuration and parameterization information.

An apparatus of a System on Chip (SoC) to implement a one out of two diagnostics (1oo2D) safety system comprises a memory comprising firmware to provide monitoring of the SoC and a second SoC, and a communication interface to provide cross-monitoring between the SoC and the second SoC. The firmware and the communication interface enable the SoC and the second SoC to implement the 1oo2D safety system without significant hardware or software external to the SoC.

A method for operating a redundantly configured automation system which has a first subsystem and a second subsystem, wherein one of these subsystems operates as the master and the other of these subsystems operates as the slave, where in the event that the master fails the slave takes over the function of the master, and where the first subsystem receives a data packet generated by an external data source and forwards the data packet only at a level of the physical layer and the data link layer to the second subsystem before processing of the data packet occurs in the first subsystem at a higher layer than the level of the physical layer and the data link layer.

A programmable safety unit for monitoring and controlling safety functions of a hazardous environment, for example an environment including hazardous machines, processes, materials, and so forth and safety equipment associated with the hazardous environment. A safety unit is adapted for external mounting, and includes a programmable safety module and a connection part that are interconnectable enabling mounting/demounting and replacement of the programmable safety module and/or the connection part. The safety unit further includes at least two connections that are programmable as safe inputs and/or outputs for direct connection to at least a number of the safety functions or equipment of the hazardous environment, and for example the machines and/or processes.

A control assembly for an aircraft system according to an example of the present disclosure includes a multi-core processor that has a plurality of cores coupled to a communications module and to an arbitration module. The communications module is operable to communicate information between the plurality of cores and one or more aircraft modules. The plurality of cores include first and second cores operable to concurrently execute a first discrete set of software instructions to generate respective instances of an output. The arbitration module is operable to communicate each and every one of the respective instances to control the one or more aircraft modules. A method of operating an aircraft system is also disclosed.