Provided is a recording medium having a verification program recorded thereon, wherein the verification program is executed by computer and causes the computer to function as: a test information acquisition unit which acquires test information showing a test signal generated by a field device installed in a plant; a result information acquisition unit which acquires result information showing a test result signal output by a monitor device installed in the plant in response to the field device generating the test signal; and a verification unit which verifies, based on the test information and the result information, whether or not a relationship is established between the test signal and the test result signal, the relationship depending on a performed change of a signal that is generated by the field device and output from the monitor device before the signal is output from a monitor device.

Respective processing hierarchies of a control program of an electronic control system and a testing program of a testing apparatus are each configured in the same manner; requesting data for each of processing hierarchies of the control program to be executed by the electronic control system is created without making any change in a required communication specification between a transmission direction and a reception direction; requesting data for each of processing hierarchies of the testing program to be executed by the testing apparatus is created while changing a transmission direction of communication requesting data to a reception direction thereof and changing the reception direction to the transmission direction.

A safety input system for monitoring a sensor can include a voltage sensing circuit configured to produce a first detection output upon sensing a signal exceeding a voltage threshold, and a current sensing circuit configured to produce a second detection output upon sensing the signal exceeding a current threshold and/or voltage threshold. The signal can come from a sensor in an industrial automation system, such as a light curtain. The first detection output can be provided to a first processor, and the second detection output can be provided to a second processor, so that two processors can independently monitor the sensor. The signal can be monitored by separate input systems. Periodically the first processor can inject a first test signal into the input system for the second processor to detect, and the second processor can inject a second test signal into the input system for the first processor to detect.

A computer-implemented method for testing an real and/or virtual automotive system through a test by a test environment interacting with the real and/or virtual part, which includes a test series with different test cases of the test for different execution conditions that are specified in test configurations. Each combination of test case and test configuration is assigned a test status value from a group of predefined test status values in accordance with an evaluation of the function of the system in the corresponding test. For further planning, execution, and/or evaluation of the test series at least once a relative test coverage of at least one of the status values is determined in the resulting test case configuration matrix and/or a relative potential for improvement of the test coverage of at least one of the status values with regard to a test case and/or with regard to a configuration is determined.

Provided is a recording medium having a verification program recorded thereon, wherein the verification program is executed by computer and causes the computer to function as: a test information acquisition unit which acquires test information showing a test signal generated by a field device installed in a plant; a result information acquisition unit which acquires result information showing a test result signal output by a monitor device installed in the plant in response to the field device generating the test signal; and a verification unit which verifies, based on the test information and the result information, whether or not a relationship is established between the test signal and the test result signal, the relationship depending on a performed change of a signal that is generated by the field device and output from the monitor device before the signal is output from a monitor device.

An evaluation system includes: processing execution means for executing computation in accordance with a safety program; setting means for receiving an input signal of an evaluation target and an expected output value; first determination means for determining whether or not a first output value of an output signal decided by the processing execution means coincides with the expected output value based on reception of a change in the value of the input signal from a first input value to a second input value from an input device; second determination means for determining whether or not a second output value of an output signal decided by the processing execution means coincides with the first output value based on reception of returning of the value of the input signal from the second input value to the first input value from the input device; and output means for outputting determination results.

A safety input system for monitoring a sensor can include a voltage sensing circuit configured to produce a first detection output upon sensing a signal exceeding a voltage threshold, and a current sensing circuit configured to produce a second detection output upon sensing the signal exceeding a current threshold and/or voltage threshold. The signal can come from a sensor in an industrial automation system, such as a light curtain. The first detection output can be provided to a first processor, and the second detection output can be provided to a second processor, so that two processors can independently monitor the sensor. The signal can also be monitored by separate input systems. Periodically, for additional protection, the first processor can inject a first test signal into the input system for the second processor to detect, and the second processor can inject a second test signal into the input system for the first processor to detect.

An evaluation system includes: processing execution means for executing computation in accordance with a safety program; setting means for receiving an input signal of an evaluation target and an expected output value; first determination means for determining whether or not a first output value of an output signal decided by the processing execution means coincides with the expected output value based on reception of a change in the value of the input signal from a first input value to a second input value from an input device; second determination means for determining whether or not a second output value of an output signal decided by the processing execution means coincides with the first output value based on reception of returning of the value of the input signal from the second input value to the first input value from the input device; and output means for outputting determination results.

A safety relay configuration system for configuring safety functions to be carried out by a safety relay is provided. The configuration system comprises a number of features that facilitate intuitive and simplified configuration of an industrial safety relay, including but not limited to features that guide the user through the configuration process using an intuitive sequential procedure that provides feedback and prompts based on user interaction, enforce design consistency throughout the configuration project by intelligently limiting user selections, and visually organize configuration and status information in a manner that efficiently utilizes display space and allows the user to quickly evaluate available configuration options.