A sensor device using verification includes a sensor component and a verification component. The sensor component is configured to generate first data and second data. The verification component is configured to analyze the first data and the second data and generate verification data based on the first data and the second data.

A safety input device for use in a single-wire safety system comprises a fast-switching architecture that allows a safety signal to propagate through the safety device to downstream devices with negligible delay. Rather than placing the signal processor in-line between the signal input and output terminals of the safety device, an electronic switch is placed between the input and output terminals. A signal processor in parallel with the switch monitors the incoming signal and closes the switch if the safety signal is absent, effectively shorting the input and output terminals and allowing the incoming safety signal to pass substantially instantaneously. Loss of the safety signal at the input terminal is immediately reflected by the loss of safety signal output at the output terminal, eliminating processing delay between loss of the safety signal at the input terminal and cessation of the output signal at the output terminal.

The invention relates to an engine control device comprising a first control channel (V1) and a second control channel (V2), each control channel comprising a first sensor (CAV1, CAV2) and a second sensor (CBV2, CBV2), each configured to provide, respectively, a first measurement (A) and a second measurement (B) to each channel, each of the channels having an active or passive state defining an active channel (V1) or a passive channel (V2), the active channel (V1) being designed to control at least one actuator (ACT) of the engine while the passive channel (V2) is designed to take over for the active channel if the latter fails.

A system for controlling a process having a first control device for processing first data, and a first communication interface of a first communication unit designed for receiving the first data, and a second control device for processing second data, and a second communication interface of a second communication unit, designed for receiving the second data. The first communication unit comprises a third communication interface and the second communication unit comprises a fourth communication interface. The third communication interface is connected to the second communication interface and the first processor processes or compares the second data received by the third communication interface with the first data received by the first communication interface. The fourth communication interface is connected to the first communication interface, and the second processor processes or compares the second data received by the second communication interface with the first data received by the fourth communication interface.

A redundant control system includes a plurality of channels each including a processing system configured to execute a control application for a controlled system. The redundant control system also includes a switchover artificial intelligence control operable to evaluate a state of the channels of the redundant control system, monitor a plurality of input/output data and communication data of the channels, and apply a fault model to determine one or more component faults and system faults of the channels based on the state, the input/output data, and the communication data. The switchover artificial intelligence control is further operable to command a switchover of a control function from one of the channels having a lower health status to one of the channels having a higher health status based on the component faults and system faults of the channels.

A sensor device using verification includes a sensor component and a verification component. The sensor component is configured to generate first data and second data. The verification component is configured to analyze the first data and the second data and generate verification data based on the first data and the second data.

A circuit is provided that has three clock sources, a first processing unit connected to the first clock source, a second processing unit connected to the second clock source, and an input unit. The first processing unit has a first logic circuit and a first memory circuit connected to the first logic circuit, wherein a first set of instructions, which is designed to implement a first control program when executed by the first logic circuit, is stored in the first memory circuit, wherein the first clock source specifies a clock timing of the execution of the first set of instructions. The second processing unit has a second logic circuit and a second memory circuit connected to the second logic circuit, wherein a second set of instructions, which is designed to implement a second control program when executed by the second logic circuit, is stored in the second memory circuit.

A sensor device using verification includes a sensor component and a verification component. The sensor component is configured to generate first data and second data. The verification component is configured to analyze the first data and the second data and generate verification data based on the first data and the second data.

A redundant control system includes a plurality of channels each including a processing system configured to execute a control application for a controlled system. The redundant control system also includes a switchover artificial intelligence control operable to evaluate a state of the channels of the redundant control system, monitor a plurality of input/output data and communication data of the channels, and apply a fault model to determine one or more component faults and system faults of the channels based on the state, the input/output data, and the communication data. The switchover artificial intelligence control is further operable to command a switchover of a control function from one of the channels having a lower health status to one of the channels having a higher health status based on the component faults and system faults of the channels.

A method for error-protected acquisition of a measured value in a control unit, wherein the measured value is firstly acquired with a first acquisition device and secondly with a second acquisition device and thereby a first measured value and a second measured value are made available, where in a comparison step in a safety program executing in the control unit, the first and the second measured value are compared with one another for a deviation from one another and upon reaching or exceeding a pre-determined maximum deviation, an error is identified.