An electronic control unit for vehicle capable of receiving a program by communication expands the received program in a volatile memory and executes the expanded program. As an example of this program, there is a program for changing a communication environment for communicating with another unit.

A device-system comprises parallel operating devices (105-107) for driving an operating quantity towards a target value, and a control system for controlling each device at least partly based on a device-specific integral term relating to a time integral of a device-specific error signal that is indicative of a deviation of the operating quantity from the target value. The control system comprises a stabilizing system that computes an arithmetic average of the device-specific integral terms and corrects the device-specific integral terms towards the computed arithmetic average. The correction of the device-specific integral terms makes it possible to avoid unwanted drifts in the device-specific integral terms in a situation where there are differences between the device-specific error signals. The devices can be peers to each other and thus redundancy is achieved because one device can be removed from or added to the device-system without actions from the other devices.

A runtime server includes a plurality of simultaneously executing runtime systems, which are configured for real-time execution of a control program for an automation system. At least two of the runtime systems execute application modules of the control program, with at least one module executing an application of the control program being installed on each runtime system. Each runtime system has a data transmission interface for transmitting data between the runtime systems and/or application modules, an I/O configuration which defines an allocation between at least one variable of the application modules and at least one hardware address of a hardware component of the automation system, an I/O interface for data exchange between the runtime systems and hardware components, and an intermediate I/O mapping layer. The I/O configurations are mapped in the intermediate I/O mapping layer.

A device-system comprises parallel operating devices (105-107) for driving an operating quantity towards a target value, and a control system for controlling each device at least partly based on a device-specific integral term relating to a time integral of a device-specific error signal that is indicative of a deviation of the operating quantity from the target value. The control system comprises a stabilizing system that computes an arithmetic average of the device-specific integral terms and corrects the device-specific integral terms towards the computed arithmetic average. The correction of the device-specific integral terms makes it possible to avoid unwanted drifts in the device-specific integral terms in a situation where there are differences between the device-specific error signals. The devices can be peers to each other and thus redundancy is achieved because one device can be removed from or added to the device-system without actions from the other devices.

An electronic control unit for vehicle capable of receiving a program by communication expands the received program in a volatile memory and executes the expanded program. As an example of this program, there is a program for changing a communication environment for communicating with another unit.

An electronic control unit for vehicle capable of receiving a program by communication expands the received program in a volatile memory and executes the expanded program. As an example of this program, there is a program for changing a communication environment for communicating with another unit.

A runtime server includes a plurality of simultaneously executing runtime systems, which are configured for real-time execution of a control program for an automation system. At least two of the runtime systems execute application modules of the control program, with at least one module executing an application of the control program being installed on each runtime system. Each runtime system has a data transmission interface for transmitting data between the runtime systems and/or application modules, an I/O configuration which defines an allocation between at least one variable of the application modules and at least one hardware address of a hardware component of the automation system, an I/O interface for data exchange between the runtime systems and hardware components, and an intermediate I/O mapping layer. The I/O configurations are mapped in the intermediate I/O mapping layer.

A method and system for scheduling a device or a system of devices to perform specific functions. The system comprises of a graphical user interface (GUI) to configure the schedule data, a communication protocol to send the data to an end-device or to multicast the data to multiple end-devices, and the end-device that is able to receive the schedule data, process the data, and send electrical signals to trigger specific functions of the device based on the schedule data. The present invention reduces the complexity and effort in scheduling complex system that involves unusual scheduling requirements that include but are not limited to unbounded durations, nested functions, and asynchronous functions.

A computer-implemented method for generating a control program that is executable on a control system from a graphical control model. A better utilization of the control system is achieved in that the graphical control model is translated into program code such that the generated program code has at least one FXP operation and at least one FLP operation, and in that the generated program code is translated into the executable control program such that when the control program is executed on the control system a portion of the control program is executed on the FXP unit and another portion of the control program is executed on the FLP unit.