The present invention provides a configuration capable of further suppressing power required for monitoring connection between devices. The device includes a controller capable of selecting an active state and a low power consumption state, and a switch device for controlling electrical connection/disconnection between an interrupt signal line and a bus in accordance with an output signal from the controller. In the low power consumption state, the controller returns to the active state when the potential appearing on the interrupt signal wiring substantially matches the potential of the bus, and after the return to the active state, provides the output signal to the switch device to electrically connect the interrupt signal wiring and the bus.

A runtime server includes a plurality of simultaneously executing runtime systems, which are configured for real-time execution of a control program for an automation system. At least two of the runtime systems execute application modules of the control program, with at least one module executing an application of the control program being installed on each runtime system. Each runtime system has a data transmission interface for transmitting data between the runtime systems and/or application modules, an I/O configuration which defines an allocation between at least one variable of the application modules and at least one hardware address of a hardware component of the automation system, an I/O interface for data exchange between the runtime systems and hardware components, and an intermediate I/O mapping layer. The I/O configurations are mapped in the intermediate I/O mapping layer.

An input-output apparatus is provided. The apparatus includes a lower-level layer interface connected to a field device, a higher-layer interface connected to a controller, a maintenance interface connected to a setting apparatus, a switch, and a control device. The switch switches between a first connection and a second connection. The control device, in an engineering mode, permits the switch to transition freely between the first connection and the second connection, and in an operation mode, controls the switch to switch to the first connection and prohibits communication through the maintenance interface. In response to a permission command received through the higher-level layer interface, the control device permits communication through the maintenance interface, and in response to a connection request received through the maintenance interface when the control device permits communication with the maintenance interface, the control device controls the switch to switch from the first connection to the second connection.

The present invention provides a configuration capable of further suppressing power required for monitoring connection between devices. The device includes a controller capable of selecting an active state and a low power consumption state, and a switch device for controlling electrical connection/disconnection between an interrupt signal line and a bus in accordance with an output signal from the controller. In the low power consumption state, the controller returns to the active state when the potential appearing on the interrupt signal wiring substantially matches the potential of the bus, and after the return to the active state, provides the output signal to the switch device to electrically connect the interrupt signal wiring and the bus.

A process control system is provided which has at least one OPC client and one OPC server which communicate via a standardized OPC interface. Furthermore the process control system has at least two redundantly operated control devices which each communicate with the OPC server by means of a coupling device. Each control device is designed to provide process variables and status information. The status information contains the current role of the respective control device, wherein the current role is either that of a main control device or an auxiliary control device. The OPC server is designed to detect the main control device in response to the status information of at least one control device, to register a list of variables generated by the OPC client at the main control device and/or to transmit to the OPC client only the process variables which have been provided by the main control device.

An input-output apparatus is provided. The apparatus includes a lower-level layer interface connected to a field device, a higher-layer interface connected to a controller, a maintenance interface connected to a setting apparatus, a switch, and a control device. The switch switches between a first connection and a second connection. The control device, in an engineering mode, permits the switch to transition freely between the first connection and the second connection, and in an operation mode, controls the switch to switch to the first connection and prohibits communication through the maintenance interface. In response to a permission command received through the higher-level layer interface, the control device permits communication through the maintenance interface, and in response to a connection request received through the maintenance interface when the control device permits communication with the maintenance interface, the control device controls the switch to switch from the first connection to the second connection.

A runtime server includes a plurality of simultaneously executing runtime systems, which are configured for real-time execution of a control program for an automation system. At least two of the runtime systems execute application modules of the control program, with at least one module executing an application of the control program being installed on each runtime system. Each runtime system has a data transmission interface for transmitting data between the runtime systems and/or application modules, an I/O configuration which defines an allocation between at least one variable of the application modules and at least one hardware address of a hardware component of the automation system, an I/O interface for data exchange between the runtime systems and hardware components, and an intermediate I/O mapping layer. The I/O configurations are mapped in the intermediate I/O mapping layer.

An input-output apparatus which is used in a process control system is provided. The input-output apparatus includes a first interface to which a lower-level apparatus is connected; a second interface to which a higher-level apparatus is connected; a third interface to which an external setting apparatus is connected; a switcher which switches between a connection of the second interface to the first interface and a connection of the third interface to the first interface; and a control device which, when in a first state in which the second interface is connected to the first interface by the switcher and the connection of the third interface to the first interface is permitted, controls the switcher to cause transitioning to a second state in which the third interface and the first interface are connected when a connection request to the first interface is input through the third interface.

A cognitive control of a potentially hazardous item is disclosed. A user profile can be generated for the potentially hazardous item, the user profile including a risk value and a risk threshold. A risk value can be calculated for the potentially hazardous item based on the user profile and context associated with the potentially hazardous item. The risk value can be continuously determined. The risk value can be compared to the risk threshold, and the operational state of the potentially hazardous item changed a first state to a second state, based at on a determination that the risk value exceeds the risk threshold.

A cognitive control of a potentially hazardous item is disclosed. A user profile can be generated for the potentially hazardous item, the user profile including a risk value and a risk threshold. A risk value can be calculated for the potentially hazardous item based on the user profile and context associated with the potentially hazardous item. The risk value can be continuously determined. The risk value can be compared to the risk threshold, and the operational state of the potentially hazardous item changed a first state to a second state, based at on a determination that the risk value exceeds the risk threshold.