Method for monitoring a first processor of a sensor module by means of a second processor

A method for monitoring a first digital processor integrated into a sensor module of a field device of automation technology and having a first set of machine commands on which, in order to calculate a measured value on the basis of supplied raw measured values, an algorithm is executed using a second digital processor integrated into a main electronics module of the field device, said method comprising the following method steps:

• calculating verification data on the basis of specified input data using a test algorithm on an external computing unit that is independent of the field device, wherein the test algorithm is divided into at least one initial section and an end section, wherein the at least one initial section and the end section comprise at least one opcode of the first set of machine commands used while executing the algorithm on the first processor;
• storing the specified input data specified for calculating the verification data and the verification data calculated using the test algorithm in the sensor module of the field device;
• transmitting the specified input data stored in the sensor module and the verification data to the main electronics module;
• transmitting the specified input data from the main electronics module to the sensor module during measuring operation of the field device;
• executing the test algorithm on the first digital processor of the sensor module in such a way that output data are calculated on the basis of the specified input data transmitted from the main electronics module, wherein the algorithm between the initial section and the end section is executed such that, after the test algorithm has been executed, the algorithm can be checked on the basis of the verification data whether the algorithm has been run through completely;
• making the output data calculated using the first digital processor available in the main electronics module;
• checking, using the second digital processor of the main electronics module, the output data with the verification data that is made available by the sensor module and, if the output data does not correspond to the verification data, determining a malfunction.