US 2012/0245709 A1Published application

Safety controller and safety control method

AssigneeToyota Jidosha Kabushiki Kaisha

InventorsTetsuya Taira, Hiroshi Bitoh

Life of this patent

Estimating the term…

Loading patent…

Abstract

Time partitions which need not be executed can be skipped. An OS partially includes a partition scheduler which selects and decides a time partition to be subsequently scheduled in accordance with a scheduling pattern including TP1 in which an execution time is allocated to a safety monitoring program, TP2 in which the execution time is allocated to a normal control program, and TP 3 in which the execution time is allocated to a safety control program. A processor executes the OS to cause the partition scheduler to periodically operate. The partition scheduler skips a TP including a program which need not be executed among TPs included in the scheduling pattern, in response to a notification of an execution result from a program executed in at least one of the time partitions TP1 to TP3.

Claims10

Dependent claims

A safety controller comprising:

a hardware resource including at least one processor;
and
a system program for controlling allocation of an execution time of the processor with respect to (a) a safety monitoring task for motoring occurrence of an abnormality related to a control target, (b) a normal control task related to a control of the control target during normal time, and (c) the safety control task related to the control of the control target upon occurrence of an abnormality, wherein
the system program partially includes:
a partition scheduler that selects and decides a time partition to be subsequently scheduled in accordance with a scheduling pattern including:
(d) a first time partition in which the execution time is allocated to the safety monitoring;
task (e) a second time partition in which the execution time is allocated to the normal control task;
and (f) a third time partition in which the execution time is allocated to the safety control task;
a first task scheduler for scheduling the safety monitoring task in the first time partition;
a second task scheduler for scheduling the normal control task in the second time partition;
and a third task scheduler for scheduling the safety control task in the third time partition,
the processor executes the system program to cause the partition scheduler to operate periodically, and
the partition scheduler skips a time partition including a task which need not be executed among time partitions included in the scheduling pattern, in response to a notification of an execution result from a task executed in at least one of the first to third time partitions.

10 more elements

A safety control method for a control target, comprising the steps of:

periodically operating to cause a processor to select and decide a time partition to be subsequently scheduled in accordance with a scheduling pattern including (a) a first time partition in which an execution time of the processor is allocated to a safety monitoring task for monitoring occurrence of an abnormality related to the control target, (b) a second time partition in which the execution time is allocated to a normal control task related to a control for the control target during normal time, and (c) a third time partition in which the execution time is allocated to a safety control program related to the control for the control target upon occurrence of an abnormality;
and
scheduling, in the time partition, tasks to which the execution time is allocated in the time partition;
and
operating to cause the processor to skip a time partition including a task which need not be executed among time partitions included in the scheduling pattern, in response to a notification of an execution result from a task executed in at least one of the first to third time partitions.

2 more elements

Dependencies are inferred from the claim text.