Redundant Automation System and Method for Operating the Redundant Automation System

A redundant automation system comprising:

• at least one first hardware unit including a first processor unit and a second processor unit;
• and
• at least one second hardware unit including a third processor unit and a fourth processor unit;
• wherein the first hardware unit is configured to execute a first group of tasks via the first processor unit, execute a second group of tasks via the second processor unit and output corresponding output signals to an industrial process controlled by the redundant automation system;
• wherein the second hardware unit is configured to execute a third group of tasks via the third processor unit, execute a fourth group of tasks via the fourth processor unit and output corresponding output signals to an industrial process controlled by the redundant automation system,
• wherein the redundant automation system is configured to, in an event of failure of the first hardware unit, execute the tasks of the third and fourth groups and output corresponding output signals to the industrial process controlled by the redundant automation system;
• wherein the redundant automation system is further configured to, in an event of failure of the second hardware unit, execute the tasks of the first and second groups and output the corresponding output signals to the controlled industrial process;
• wherein the redundant automation system further comprises:
• a first synchronization connection via which the tasks of the first group and the third group are compared with one another;
• and
• a second synchronization connection via which the tasks of the second group and the fourth group are compared with one another,
• wherein the first synchronization connection is established for a time-offset comparison of the tasks of the first and third groups, the time-offset comparison of the tasks of the first group and the third group via the first synchronization connection having a time lag of more than 10 milliseconds;
• and
• wherein the second synchronization connection is established for a highly synchronous comparison of the tasks of the second and fourth groups, the highly synchronous comparison of the tasks of the second and fourth groups via the second synchronization connection having a time lag of less than 1 millisecond.

A method for operating a redundant automation system comprising at least one first hardware unit and at least one second hardware unit, the first hardware unit including a first processor unit and a second processor unit, and the second hardware unit including a third processor unit and a fourth processor unit, the method comprising:

• executing, by the first hardware unit, a first group of tasks via the first processor unit and executing a second group of tasks via the second processor unit;
• executing, by the second hardware unit, a third group of tasks via the third processor unit and executing a fourth group of tasks via the fourth processor unit;
• executing, by the redundant automation system, in an event of failure of the first hardware unit, the tasks of the third and fourth groups and outputting corresponding output signals to an industrial process controlled by the redundant automation system;
• executing, by the redundant automation system, in an event of failure of the second hardware unit, the tasks of the first and second groups and outputting corresponding output signals to the controlled industrial process, the redundant automation system comprising a first synchronization connection via which the tasks of the first and third groups are compared with one another, and comprising a second synchronization connection via which the tasks of the second and fourth groups are compared with one another;
• performing a time-offset comparison of the tasks of the first group and the third group over the first synchronization connection, the time-offset comparison of the tasks of the first group and the third group via the first synchronization connection having a time lag of more than 10 milliseconds;
• and
• performing a highly synchronous comparison of the tasks of the second group and the fourth group over the second synchronization connection, the highly synchronous comparison of the tasks of the second and the fourth groups via the second synchronization connection having a time lag of less than 1 millisecond.