# US 8,751,875 B2 · Method for checking suitability of a data processing device for performing failsafe automation processes > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,751,875 B2 - Document ID: US8751875B2 - Status: Granted - Kind: B2 - Application number: 12/760,660 - Filed: 2010-04-15 - Published: 2010-10-21 - Granted: 2014-06-10 - Earliest claimed: 2009-04-17 - Assignees: Siemens Aktiengesellschaft - Applicants: Andreas Schenk; Markus Walter - Inventors: Andreas Schenk; Markus Walter - Web page: https://patentgrep.com/patent/US8751875B2 ## CPC - G06F 11/1604: {where the fault affects the clock signals of a processing unit and the redundancy is at or within the level of clock signal generation hardware} - G05B 19/0428: {Safety, monitoring (G05B19/0423 takes precedence)} - G06F 11/1608: {Error detection by comparing the output signals of redundant hardware (G06F11/1629, G06F11/1666 take precedence; error detection or correction in information storage based on relative movement between record carrier and transducer G11B20/18; checking static stores for correct operation G11C29/00; for logic circuits H03K19/003, H03K19/007; for pulse counters or frequency dividers H03K21/40)} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G05B: CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS (systems for controlling or regulating non-electric variables G05D; systems for regulating electric or magnetic variables G05F; control devices or systems insofar as characterised by mechanical features only G05G) ## Abstract A method for checking a data processing device to determine its suitability for performing failsafe automation processes, wherein the data processing device includes a first and a second time base. The method comprises determining a first time value of the first time base after expiration of a time period of length T, determining a second time value of the second time base after the expiration of the time period of length T, determining a deviation between the first and the second time value, and initiating a troubleshooting measure if the deviation undershoots, i.e., undershoots or reaches, a predefined or pre-definable limit value. ## Claims ### Claim 1 A method for checking a data processing device to determine its suitability for performing failsafe automation processes, the data processing device including a first time base and a second time base, the method comprising the steps of: determining a first time value of the first time base of the data processing device to determine its suitability for performing failsafe automation processes after expiration of a time period of length T; determining a second time value of the second time base of the data processing device after the expiration of the time period of length T; comparing the first and second time bases over a selected time period to determine a deviation between the first and second time values of the data processing device to check independence of the first and second time bases; and initiating a troubleshooting measure of the data processing device if the deviation undershoots or reaches a predefined or pre-definable first limit value. ### Claim 2 (depends on 1) The method as claimed in claim 1, wherein the troubleshooting measure is initiated if the deviation undershoots or reaches the pre-definable first limit value. ### Claim 3 (depends on 1) The method as claimed in claim 1, wherein the troubleshooting measure is initiated if the deviation exceeds a predefined or pre-definable second limit value. ### Claim 4 (depends on 1) The method as claimed in claim 1, wherein said step of initiating the troubleshooting measure includes outputting a message relating to an impossibility of confirming an independence of the first and second time bases. ### Claim 5 (depends on 3) The method as claimed in claim 3, wherein said step of initiating the troubleshooting measure includes outputting a message relating to an impossibility of confirming an independence of the first and second time bases. ### Claim 6 (depends on 1) The method as claimed in claim 1, wherein a success measure is initiated if the deviation exceeds the first limit value. ### Claim 7 (depends on 6) The method as claimed in claim 6, wherein the success measure is initiated if the deviation exceeds the first limit value and undershoots a second limit value. ### Claim 8 (depends on 1) The method as claimed in claim 1, wherein the first time base and the second time base are each assigned a hardware oscillating element. ### Claim 9 (depends on 7) The method as claimed in claim 7, wherein the hardware oscillating element comprises at least one of an electromechanical oscillator, a piezoelectric oscillator and an oscillating quartz crystal. ### Claim 10 (depends on 1) The method as claimed in claim 1, wherein the data processing device comprises one of a personal computer or workstation including a standard time base having a system quartz crystal and a real-time clock (RTC) time base for driving a real-time clock of the data processing device; and wherein the first time base can be driven or is driven using the system quartz crystal and the second time base can be driven or is driven using an RTC quartz crystal for the real-time clock or using the system quartz crystal. ### Claim 11 (depends on 1) The method as claimed in claim 1, wherein the data processing device comprises one of an automation device or a computer. ### Claim 12 A data processing device for performing automation processes, comprising: at least one processor; a hardware oscillating element; a first time base connected to the at least one processor and configured to supply a clock pulse to the at least one processor, the first time base being drivable or driven using the hardware oscillating element; a second time base connected to the at least one processor and configured to operate a real-time clock of the data processing device, the time base being drivable or driven using one of a further hardware oscillating element or the hardware oscillating element; and a control device configured to: determine a first time value of the first time base after expiration of a time period of length T to provide an indication of the suitability of the data processing device to perform failsafe automation processes; determine a second time value of the second time base after the expiration of the time period of length T; compare the first and second time bases over a selected time period to determine a deviation between the first and second time values to check independence of the first and second time bases; and initiate a troubleshooting measure if the deviation undershoots or reaches a predefined or predefinable first limit value. ### Claim 13 A process in which a computer executes instructions set forth in a computer program executing on a processor which, when used on the computer causes the processor to check a data processing device to determine suitability of the data processing device for performing failsafe automation processes, the data processing device including a first time base and a second time base, the computer program comprising: program code for determining a first time value of the first time base of the data processing device to determine its suitability for performing failsafe automation processes after expiration of a time period of length T; program code for determining a second time value of the second time base of the data processing device after the expiration of the time period of length T; program code for comparing the first and second time bases over a selected time period to determine a deviation between the first and second time values of the data processing device to check independence of the first and second time bases; and program code for initiating a troubleshooting measure of the data processing device if the deviation undershoots or reaches a predefined or pre-definable first limit value. ### Claim 14 A non-transitory computer-readable storage medium encoded with a computer program executed by a computer that checks a data processing device to determine its suitability for performing failsafe automation processes is stored, the data processing device including a first and a second time base, the computer program comprising: program code for determining a first time value of the first time base of the data processing device to determine its suitability for performing failsafe automation processes after expiration of a time period of length T; program code for determining a second time value of the second time base of the data processing device after the expiration of the time period of length T; program code for comparing the first and second time bases over a selected time period to determine a deviation between the first and second time values of the data processing device to check independence of the first and second time bases; and program code for initiating a troubleshooting measure of the data processing device if the deviation undershoots or reaches a predefined or pre-definable first limit value. ### Claim 15 (depends on 11) The data processing device as claimed in claim 11, wherein the data processing device comprises one of an automation device or a computer.