Meeting the safety requirements of automation systems in a more flexible manner, the invention provides a control and data transmission system for controlling safety-critical processes comprising a plurality of I/O modules connected via a first communication network to a gateway module. The gateway module is connected to a second communication network hierarchically superior to the first communication network and acts as a gateway between the first and the second communication networks. At least one of the I/O modules comprises a diagnosis unit for generating status data relating to the functional state of an input and/or output and/or of a process device. The gateway module and the I/O modules communicate via the first communication network in a safe manner to transfer status data and input and/or output data. The gateway module performs safety processing of the status data and/or of the input and/or output data.

A series module for a modular designed control arrangement includes a first series interface and a first bus interface and a second series interface and a second bus interface, wherein a bus communication line is formed between the two bus interfaces and multiple connecting lines are formed between the two series interfaces and wherein the connecting lines are arranged at least partially Z-linked between the two series interfaces.

A series module for a modular designed control arrangement includes a first series interface and a first bus interface and a second series interface and a second bus interface, wherein a bus communication line is formed between the two bus interfaces and multiple connecting lines are formed between the two series interfaces and wherein the connecting lines are arranged at least partially Z-linked between the two series interfaces.

A control system for controlling a process. The control system includes primary and secondary module buses over which information may be transmitted between a controller and a plurality of I/O modules. Each of the controller and I/O modules has a power sense circuit for detecting current on the high side of a driver and a ground sense circuit for detecting current on the low side of the driver. The driver is determined to have failed if either the current on the high side of the driver measured by the power sense circuit is outside a predetermined high range or the current on the low side of the driver measured by the ground sense circuit is outside a predetermined low range.

Meeting the safety requirements of automation systems in a more flexible manner, the invention provides a control and data transmission system for controlling safety-critical processes, comprising a plurality of I/O modules connected via a first communication network to a gateway module. The gateway module is connected to a second communication network hierarchically superior to the first communication network and acts as a gateway between the first and the second communication networks. At least one of the I/O modules comprises a diagnosis unit for generating status data relating to the functional state of an input and/or output and/or of a process device. The gateway module and the I/O modules communicate via the first communication network in a safe manner to transfer status data and input and/or output data. The gateway module performs safety processing of the status data and/or of the input and/or output data.