US 2025/0028293 A1Published application

Redundant Automation System and Method for Operation

AssigneeSiemens Aktiengesellschaft

InventorsThomas GROSCH, Albert RENSCHLER

Life of this patent

Estimating the term…

Loading patent…

Abstract

A redundant automation system includes a first and a second identically configured subsystems, which each have a control program for controlling a technical process, wherein a synchronization connection is between the first and second subsystems, saved in the first subsystem in a source file is status information including static configuration data and dynamic runtime data, in order to enable uninterrupted updates of the second subsystem, a first data reconciliator is configured with a first independent program unit that is configured to incrementally read out write accesses of dynamic runtime data of the first subsystem to the source file to update the dynamic runtime data of the second subsystem and to transfer data contents of repeat write accesses to the second subsystem, and a second data reconciliator is configured with a second independent program unit configured to incrementally receive the repeat write accesses and subsequently storing them in a target file.

Claims7

Dependent claims

A redundant automation system comprising:

a first subsystem;
a second subsystem, the first and second subsystems each having a control program for controlling a technical process and being configured in an identical manner;
a synchronization connection operatively coupled between the first subsystem and the second subsystem;
and
status information comprising static configuration data and dynamic runtime data saved in the first subsystem in a source file;
wherein the first subsystem includes a first data reconciliator configured to reconcile data of the status information saved in the first subsystem with status information of the second subsystem which includes a second data reconciliator;
wherein the first data reconciliator is further configured to transfer the static configuration data to the second subsystem;
wherein the second data reconciliator is configured to back up the static configuration data and create a target file for the dynamic runtime data;
wherein the first data reconciliator is configured with a first independent program unit which is configured to incrementally read out write accesses of dynamic runtime data of the first subsystem to the source file for the updating of the dynamic runtime data of the second subsystem, and to transfer data contents of said repeat write accesses to the second subsystem for synchronization purposes;
wherein the second data reconciliator is configured with a second independent program unit which is configured to incrementally receive the repeat write accesses and subsequently store said repeat write accesses them in the created target file;
wherein the first subsystem is further repeat write accesses in such that the first control program is synchronized with the first independent program unit;
and
wherein the second subsystem is configured such that the second control program is synchronized with the second independent program unit;
whereby an order of the write accesses to the source file and the target file is identical on the first and second subsystems.

11 more elements

A method for operating a redundant automation system, a first subsystem and a second subsystem for controlling a technical process each processing a respective control program, the first subsystem guiding the process with a first control program and the second subsystem processing a second control program in sync such that, in an event of a failure of one subsystem of the first and second subsystems (1,2), a subsystem which has failed or is faulty, after fault correction or a replacement, being updated with status information from another subsystem of the first and second subsystems which is still running via a data reconciliator, in order to again operate in sync with a respective control program, in order to assume the guidance of the process in an event of a repeat failure of a respective subsystem of the first and second subsystems, and the status information comprising static configuration data and dynamic runtime data, the method comprising:

transferring, via a first data reconciliator, the static configuration data to the second subsystem;
backing up, via a second data reconciliator, the static configuration data and creating a target file for the dynamic runtime data on the second subsystem;
starting, by the first data reconciliator, a first independent program unit which incrementally reads out write accesses of dynamic runtime data of the first subsystem to a source file for update of the dynamic runtime data of the second subsystem, and transferring the data contents of repeat write accesses to the second subsystem for synchronization purposes;
starting, by the second data reconciliator, a second independent program unit which incrementally receives data contents of the repeat write accesses and subsequently storing said received data contents of the repeat write accesses in the target file;
operating, by the first independent program unit, the first control program in a synchronized manner and operating, by the second independent program unit, the second control program is operated in a synchronized manner, such that an order of the write accesses to the source file and the target file proceeds in an identical manner on the first and second subsystems.

2 more elements

Dependencies are inferred from the claim text.