Safety-oriented control system

A method for controlling safety functions in a system controller which executes safety functions forming a safety task as well as non-safety-related functions forming a non-safety related control task, said tasks being performed by the controller, results of both tasks being process signals for actuators, and both tasks formed by means of an operating program which is not safety certified in which safety modules each having a sound functionality are provided and a safety protocol which transmits data in a form of safety messages is provided, wherein input parameters and output parameters from each safety module are encapsulated by the safety protocol, and the individual safety modules are logically combined with one another in terms of data and flow by means of a data transmission link, a data interchange taking place between the safety modules on a basis of the safety protocol, wherein in an implementation step of the safety protocol the logic combination of the safety modules in terms of data and flow is stipulated in line with the safety task which is to be controlled, each safety module being assigned a unique identifier.

An automation system comprising a system controller which executes safety functions forming a safety task as well as non-safety-related functions forming a non-safety related control task, said tasks being performed by the controller, results of both tasks being process signals for actuators, and both tasks formed by using an operating program which is not safety certified, the system controller comprising safety modules each having a sound functionality and comprising a safety protocol which transmits data in a form of safety messages, in which input parameters and output parameters from the safety modules are encapsulated by the safety protocol, and has a combinational logic unit which logically combines the safety modules with other safety modules in terms of data and flow in line with the safety task which is to be controlled.

An automation system comprising a system controller which executes safety functions forming a safety task as well as non-safety-related functions forming a non-safety related control task, said tasks being performed by the controller, results of both tasks being process signals for actuators, and both tasks formed by means of an operating program which is not safety certified, the system controller comprising safety modules each having a sound functionality which are logically combined with one another in terms of data and flow by means of a data transmission link and comprising a safety protocol which transmits data in a form of safety messages, in which input parameters and output parameters from the safety modules are encapsulated by the safety protocol, wherein a logic tool in the safety protocol which is designed to stipulate, in an implementation step of the safety protocol, the safety modules' logic combination in terms of data and flow in line with the safety task which is to be controlled and to assign a unique identifier to each safety module.