A method for creating a redundant automation system, a computer program and a computer-readable medium, wherein the redundant automation system includes at least one automation installation to be controlled that is installed at an installation location and two control applications that are communicatively interconnected via a synchronization path, and includes a plurality of communication hubs and communication paths connecting these to one another, where one of the control applications operates as the master and the other control application operates as a reserve, such that when the control application operating as the master fails, the control application operating as the reserve function as the master, and where the locations of the computing resources for the control applications are selected such that the control applications are connected to the at least one automation installation via two different communication paths preferably having no or a minimal number of common communication hubs.

A program modification support device supports modifications of programs realizing functions of a process control system comprising a first process control device and a second process control device. The program modification support device includes a selector configured to select, from data used in a first program among the programs, data required to be maintained for continuing a first function when switching from the first process control device to the second process control device is performed, the first program being for realizing the first function required to be continued when the switching is performed.

The present invention provides a method for operating dual controller which monitors the state of a dual controller to determine whether the dual controller is faulty and enables operation thereof with a controller in a normal state. An operation method of a dual controller according to the present invention dq-converts control command output values of first and second controllers to calculate rates of change in dq conversion values and dq-converts feedback input values, fed back to the first and second controllers, to calculate average rates of change in dq conversion values. When the average rates of change in the dq conversion values for the control command output values and the average rates of change in the dq conversion values for the feedback input values for the respective first and second controllers are identical, the corresponding controller is determined to be in a normal state, and to be in a faulty state otherwise. According to the results of the determination, the controller in the faulty state is set to a standby state and the controller in the normal state is set to an active state.

A method for creating a redundant automation system, a computer program and a computer-readable medium, wherein the redundant automation system includes at least one automation installation to be controlled that is installed at an installation location and two control applications that are communicatively interconnected via a synchronization path, and includes a plurality of communication hubs and communication paths connecting these to one another, where one of the control applications operates as the master and the other control application operates as a reserve, such that when the control application operating as the master fails, the control application operating as the reserve function as the master, and where the locations of the computing resources for the control applications are selected such that the control applications are connected to the at least one automation installation via two different communication paths preferably having no or a minimal number of common communication hubs.

A multi-channel control system includes a first primary control microprocessor and a second primary control microprocessor operable to control a device, and a first secondary control microprocessor and a second secondary control microprocessor operable to control the device. Each of the first and second primary control microprocessors and the first and second secondary control microprocessors are arranged as an independent control channel.