This control system is provided with a plurality of slave devices and controllers. The controller is connected to one end of a field bus which includes the plurality of slave devices that is linearly connected, and the controller is connected to the other end of the field bus through a communication cable. The controllers are provided with a CPU and a transception part. One of the controllers generates a control frame with the CPU and transmits this from the transception part, and the other of the controllers performs a loop communication of the control frame by the transception part.

The disclosure is related to an electronic circuit for a field device of automation technology, comprising: a first digital processor having a first set of machine commands for executing an algorithm running in the processor, wherein the first processor is adapted to execute a test algorithm to calculate output data, wherein the test algorithm uses for calculating the output data at least a part of the first set of machine commands, which are used for executing the algorithm, a second digital processor having a second set of machine commands for executing at least one verification algorithm, wherein the second processor is adapted to execute the verification algorithm to calculate verification data, and wherein the electronic circuit including the second processor is adapted, based on the output data calculated by the first processor and the verification data calculated by the second processor, to perform a checking of the first processor.

A programmable safety unit for monitoring and controlling safety functions of a hazardous environment, for example an environment including hazardous machines, processes, materials, and so forth and safety equipment associated with the hazardous environment. A safety unit is adapted for external mounting, and includes a programmable safety module and a connection part that are interconnectable enabling mounting/demounting and replacement of the programmable safety module and/or the connection part. The safety unit further includes at least two connections that are programmable as safe inputs and/or outputs for direct connection to at least a number of the safety functions or equipment of the hazardous environment, and for example the machines and/or processes.

A method for controlling a drive having at least one converter, at least one motor and an assigned drive control, wherein a failsafe CPU is operated separately from the drive control and only processes safety-relevant information, where a number of safety functions are implemented by the failsafe CPU such that the safety-relevant functions of the drive are implemented in a simple and reliable manner.

A control assembly for an aircraft system according to an example of the present disclosure includes a multi-core processor that has a plurality of cores coupled to a communications module and to an arbitration module. The communications module is operable to communicate information between the plurality of cores and one or more aircraft modules. The plurality of cores include first and second cores operable to concurrently execute a first discrete set of software instructions to generate respective instances of an output. The arbitration module is operable to communicate each and every one of the respective instances to control the one or more aircraft modules. A method of operating an aircraft system is also disclosed.

Different cores of a multicore processor are used to provide diagnostics of sophisticated hardware without full redundancy by static assignment of the cores during individual cycles of the control program and comparison of the outputs. A method of automatically generating diverse programs for execution by these cores may modify one program to compile two different instructions without functionally changing that program through the use of DeMorgan equivalents and diverse compiler optimizations.

A device for operating an apparatus comprising a first controller configured to be controlled by a first control signal, a second controller configured to be controlled by a second control signal, a control unit operatively connected to the first controller and the second controller, wherein the first controller and the second controller are both configured to operate the apparatus.

Different cores of a multicore processor are used to provide diagnostics of sophisticated hardware without full redundancy by static assignment of the cores during individual cycles of the control program and comparison of the outputs. A method of automatically generating diverse programs for execution by these cores may modify one program to compile two different instructions without functionally changing that program through the use of DeMorgan equivalents and diverse compiler optimizations.

Methods, apparatus, and articles of manufacture to validate position parameters of a valve are disclosed. An example apparatus includes a field device, the field device further including a sensor interface to receive an unprocessed valve position parameter from a sensor and a position comparator to determine a deviation between the unprocessed valve position parameter and an interpreted valve position parameter and a valve position validator apparatus, the valve position validator apparatus further including a parameter comparator to determine if the deviation exceeds a threshold and an alert generator to generate an alert when the parameter comparator determines the deviation exceeds the threshold.

Different cores of a multicore processor are used to provide diagnostics of sophisticated hardware without full redundancy by static assignment of the cores during individual cycles of the control program and comparison of the outputs. A method of automatically generating diverse programs for execution by these cores may modify one program to compile two different instructions without functionally changing that program through the use of DeMorgan equivalents and diverse compiler optimizations.