A program modification support device supports modifications of programs realizing functions of a process control system comprising a first process control device and a second process control device. The program modification support device includes a selector configured to select, from data used in a first program among the programs, data required to be maintained for continuing a first function when switching from the first process control device to the second process control device is performed, the first program being for realizing the first function required to be continued when the switching is performed.

The real time capability is to be improved in a Cloud-based control system for an automation plant. To this end, a redundantly embodied, Cloud-based control system with a plurality of computing resources distributed over a network with control applications running thereon is proposed, which, embodied as a primary and backups, execute a control program almost simultaneously and send corresponding program instructions to the automation plant. Long transmission times of individual computing resources therefore do not have a negative effect on the control of the automation plant.

The present invention provides a method for operating dual controller which monitors the state of a dual controller to determine whether the dual controller is faulty and enables operation thereof with a controller in a normal state. An operation method of a dual controller according to the present invention dq-converts control command output values of first and second controllers to calculate rates of change in dq conversion values and dq-converts feedback input values, fed back to the first and second controllers, to calculate average rates of change in dq conversion values. When the average rates of change in the dq conversion values for the control command output values and the average rates of change in the dq conversion values for the feedback input values for the respective first and second controllers are identical, the corresponding controller is determined to be in a normal state, and to be in a faulty state otherwise. According to the results of the determination, the controller in the faulty state is set to a standby state and the controller in the normal state is set to an active state.

One aspect of the invention relates to a high-availability control system (100) for an industrial process comprising: A plurality of operator stations (108) displaying a subset of information; An interface module (105) including a pair of computers (104) for each model, each collecting each item of data received by each controller (103) having the model and eliminating the duplicates, the computers (104) operating in asynchronous redundancy; A processing module (106) including a pair of computers (104) each receiving the collected data, sorting the data received as a function of their acquisition time, eliminating the duplicates and calculating an information group by acquisition time, the computers (104) operating in active redundancy, A module for managing the operator stations (107) including one computer (104) per operator station (108), each receiving each calculated information group and sending to the operator station (108) each information group corresponding to the subset of information; A duplicate communication network, comprising a distributed redundancy module configured to manage the message exchanges between computers (104).

The present invention includes a drawing data generating unit, a variation pattern that varies at regular intervals to be displayed, a display unit that displays drawing data, and a comparator that compares whether input signals are coincident, and the drawing data generating unit includes a receiver that receives data from a higher-level device, a drawing control unit that converts the data received from the higher-level device to drawing data, and a drawing memory that stores the drawing data. The drawing data generating unit and the variation pattern are redundantly configured, and the variation pattern is input to the drawing data generating unit. One output signal of the drawing data generating unit regarding drawing data including the variation pattern is transmitted to the display unit, a plurality of output signals from the drawing data generating unit are input to the comparator, and the comparator outputs a comparison result as a detection signal outside. This improves safety and reliability when severe safety criteria are required such as in a case of monitor-display in industrial plant equipment.

A fault tolerant controller system includes a first controller and a second controller. One of the first and second controllers designated as a primary controller for generating control signals intended to control actuation devices on a vehicle under non-fault operating conditions, and the other of the first and second controllers designated as a secondary controller generating control signals intended to control actuation devices on the vehicle. The actuation devices are responsive only to the designated primary controller. An error is detected in the primary controller and a message is transmitted from the faulty controller to the non-faulty controller identifying the error. The non-faulty controller is subsequently designated as the primary controller. The control signals including an identifier that identifies the non-faulty controller as the designated primary controller. In response to detecting the error, the faulty controller is reset to operate in a safe operating mode as the secondary controller.

Approaches for redundant control for at least one active controller configured to perform a plurality of functions and communicate with a plurality of components over a communications network in a multi-controller system is provided. The redundant controller is configured to perform a plurality of functions which are identical to the plurality of functions being performed at the active controller and determine whether a failure of the active controller has occurred. Upon determining that a failure of the active controller has occurred, the redundant controller assumes assuming the role of the active controller such that it performs the functions that are identical to the functions being performed at the active controller and communicates with the components over the communications network.

A control device (1) includes a master-information processing unit (10), and a slave-information processing unit (20) including an information processing CPU (220) that performs information processing through a general-purpose OS, and a distribution control CPU (210) that measures an operating state of the information processing CPU (220) through a real-time OS. The master-information processing unit (10) acquires, from the slave-information processing unit (20), information indicating the operating state of the information processing CPU (220) in the slave-information processing unit (20), determines, based on the acquired information, whether to request the slave-information processing unit (20) to perform information processing, and transmits, when determining to request the slave-information processing unit (20) to perform the information processing, a signal requesting the information processing to the slave-information processing unit (20). The information processing CPU (220) in the slave-information processing unit (20) performs the information processing upon receiving the signal requesting the information processing.

A control assembly for an aircraft system according to an example of the present disclosure includes a multi-core processor that has a plurality of cores coupled to a communications module and to an arbitration module. The communications module is operable to communicate information between the plurality of cores and one or more aircraft modules. The plurality of cores include first and second cores operable to concurrently execute a first discrete set of software instructions to generate respective instances of an output. The arbitration module is operable to communicate each and every one of the respective instances to control the one or more aircraft modules. A method of operating an aircraft system is also disclosed.

A control assembly for an aircraft system according to an example of the present disclosure includes a multi-core processor that has a plurality of cores coupled to a communications module and to an arbitration module. The communications module is operable to communicate information between the plurality of cores and one or more aircraft modules. The plurality of cores include first and second cores operable to concurrently execute a first discrete set of software instructions to generate respective instances of an output. The arbitration module is operable to communicate each and every one of the respective instances to control the one or more aircraft modules. A method of operating an aircraft system is also disclosed.