A spare robot controller for replacing any one of a plurality of initial robot controllers configured to control operation of respective industrial robots includes a key storage storing a plurality of shared keys and a secure storage. The spare robot controller is configured to decrypt, using one of the shared keys, an encrypted backup copy of the initial robot controller to be replaced, and to store resulting data in the secure storage. In embodiments, the is configured to extract data from the secure storage during operation and to encrypt the extracted data, using a selected one of the shared keys, for storage as a backup copy in a backup storage available to all of the initial robot controllers.

Disclosed is a redundant hot standby control system including K industrial personal computers, with a plurality of virtual control devices being established thereon respectively, at least one of the plurality of virtual control devices being established on each IPC as a main control device; and the other virtual control devices being standby control devices. Each of the standby control devices corresponds to a virtual control device, which serves as the main control device on another IPC, except for the IPC to which the standby control device itself belongs. A procedure, which is the same as that operated on the main control device corresponding thereto, is operated on the standby control device. A control bus of the system is used for connecting a plurality of the M IPCs; and a field bus is used for connecting the M IPCs and a plurality of field devices.

Disclosed is a redundant hot standby control system including K industrial personal computers, with a plurality of virtual control devices being established thereon respectively, at least one of the plurality of virtual control devices being established on each IPC as a main control device; and the other virtual control devices being standby control devices. Each of the standby control devices corresponds to a virtual control device, which serves as the main control device on another IPC, except for the IPC to which the standby control device itself belongs. A procedure, which is the same as that operated on the main control device corresponding thereto, is operated on the standby control device. A control bus of the system is used for connecting a plurality of the M IPCs; and a field bus is used for connecting the M IPCs and a plurality of field devices.

A hot-standby redundancy control system is disclosed. In an embodiment, the system includes multiple primary control apparatuses, each respectively running a process of the hot-standby redundancy control system; a backup control apparatus pool including at least one industrial personal computer (IPC), with multiple virtual control apparatuses being established on at least one IPC, and the multiple virtual control apparatuses established being in one-to-one correspondence with the multiple primary control apparatuses, and each respective multiple virtual control apparatus running a same process as a respective corresponding primary control apparatus; a control bus, to connect one or more of the t least one IPC in the multiple primary control apparatuses and the backup control apparatus pool; and a field bus, to connect one or more of the at least one IPC in the multiple primary control apparatuses and the backup control apparatus pool and multiple field apparatuses.

A hot-standby redundancy control system is disclosed. In an embodiment, the system includes multiple primary control apparatuses, each respectively running a process of the hot-standby redundancy control system; a backup control apparatus pool including at least one industrial personal computer (IPC), with multiple virtual control apparatuses being established on at least one IPC, and the multiple virtual control apparatuses established being in one-to-one correspondence with the multiple primary control apparatuses, and each respective multiple virtual control apparatus running a same process as a respective corresponding primary control apparatus; a control bus, to connect one or more of the t least one IPC in the multiple primary control apparatuses and the backup control apparatus pool; and a field bus, to connect one or more of the at least one IPC in the multiple primary control apparatuses and the backup control apparatus pool and multiple field apparatuses.