Different cores of a multicore processor are used to provide diagnostics of sophisticated hardware without full redundancy by static assignment of the cores during individual cycles of the control program and comparison of the outputs. A method of automatically generating diverse programs for execution by these cores may modify one program to compile two different instructions without functionally changing that program through the use of DeMorgan equivalents and diverse compiler optimizations.

A method for controlling an automation system having control redundancy is provided. The automation system has at least a first controller, a second controller and a plurality of field devices connected to the first and second controller via a data bus, with the first and second controller configured to cyclically control an automation process of the automation system. The method comprises cyclically controlling the automation process via the first controller, determining a malfunction of the first controller during an (n+x)-th control cycle, where the (n+x)-th control cycle is carried out x control cycles later in time than the n-th control cycle, and sending out an n-th set of output data via a second input-output unit of the second controller to the plurality of field devices in the (n+x)-th control cycle, for controlling the automation process. An automation system is configured to carry out the method.

A control device (1) includes a master-information processing unit (10), and a slave-information processing unit (20) including an information processing CPU (220) that performs information processing through a general-purpose OS, and a distribution control CPU (210) that measures an operating state of the information processing CPU (220) through a real-time OS. The master-information processing unit (10) acquires, from the slave-information processing unit (20), information indicating the operating state of the information processing CPU (220) in the slave-information processing unit (20), determines, based on the acquired information, whether to request the slave-information processing unit (20) to perform information processing, and transmits, when determining to request the slave-information processing unit (20) to perform the information processing, a signal requesting the information processing to the slave-information processing unit (20). The information processing CPU (220) in the slave-information processing unit (20) performs the information processing upon receiving the signal requesting the information processing.

This control system is provided with a plurality of slave devices and controllers. The controller is connected to one end of a field bus which includes the plurality of slave devices that is linearly connected, and the controller is connected to the other end of the field bus through a communication cable. The controllers are provided with a CPU and a transception part. One of the controllers generates a control frame with the CPU and transmits this from the transception part, and the other of the controllers performs a loop communication of the control frame by the transception part.

A control assembly for an aircraft system according to an example of the present disclosure includes a multi-core processor that has a plurality of cores coupled to a communications module and to an arbitration module. The communications module is operable to communicate information between the plurality of cores and one or more aircraft modules. The plurality of cores include first and second cores operable to concurrently execute a first discrete set of software instructions to generate respective instances of an output. The arbitration module is operable to communicate each and every one of the respective instances to control the one or more aircraft modules. A method of operating an aircraft system is also disclosed.

A control assembly for an aircraft system according to an example of the present disclosure includes a multi-core processor that has a plurality of cores coupled to a communications module and to an arbitration module. The communications module is operable to communicate information between the plurality of cores and one or more aircraft modules. The plurality of cores include first and second cores operable to concurrently execute a first discrete set of software instructions to generate respective instances of an output. The arbitration module is operable to communicate each and every one of the respective instances to control the one or more aircraft modules. A method of operating an aircraft system is also disclosed.

A control device (1) includes a master-information processing unit (10), and a slave-information processing unit (20) including an information processing CPU (220) that performs information processing through a general-purpose OS, and a distribution control CPU (210) that measures an operating state of the information processing CPU (220) through a real-time OS. The master-information processing unit (10) acquires, from the slave-information processing unit (20), information indicating the operating state of the information processing CPU (220) in the slave-information processing unit (20), determines, based on the acquired information, whether to request the slave-information processing unit (20) to perform information processing, and transmits, when determining to request the slave-information processing unit (20) to perform the information processing, a signal requesting the information processing to the slave-information processing unit (20). The information processing CPU (220) in the slave-information processing unit (20) performs the information processing upon receiving the signal requesting the information processing.

A control assembly for an aircraft system according to an example of the present disclosure includes a multi-core processor that has a plurality of cores coupled to a communications module and to an arbitration module. The communications module is operable to communicate information between the plurality of cores and one or more aircraft modules. The plurality of cores include first and second cores operable to concurrently execute a first discrete set of software instructions to generate respective instances of an output. The arbitration module is operable to communicate each and every one of the respective instances to control the one or more aircraft modules. A method of operating an aircraft system is also disclosed.

Methods, apparatus, and articles of manufacture to validate position parameters of a valve are disclosed. An example apparatus includes a field device, the field device further including a sensor interface to receive an unprocessed valve position parameter from a sensor and a position comparator to determine a deviation between the unprocessed valve position parameter and an interpreted valve position parameter and a valve position validator apparatus, the valve position validator apparatus further including a parameter comparator to determine if the deviation exceeds a threshold and an alert generator to generate an alert when the parameter comparator determines the deviation exceeds the threshold.

A method for operating a controlled object that is embedded in a changing environment. The controlled object and its environment are periodically observed using sensors. Independent data flow paths (DFP) are executed based on the data recorded through the observation of the controlled object and its environment. A first DFP determines a model of the controlled object and the environment of the controlled object and carries out a trajectory planning in order to create possible trajectories that, under the given environmental conditions, correspond to a specified task assignment. A second DFP determines a model of the controlled object and of the environment of the controlled object and determines a safe space-time domain (SRZD) in which all safe trajectories must be located. The results of the first and the second DFP are transmitted to a deciding instance to verify whether at least one of the trajectories is safe.