Redundant automation system and method for operating the redundant automation system
AssigneeSiemens Aktiengesellschaft
InventorsThomas Grosch, Jürgen Laforsch, Albert Renschler
Life of this patent
Estimating the term…
Abstract
A redundant automation system and a method for operating the redundant automation system which is provided with a first subsystem and a second subsystem that each process a control program while controlling a technical process, one of these subsystems operating as a master and the other subsystem operating as a slave, and the slave assuming the function of the master if the master fails such that it becomes possible to dispense with temporally synchronous communication between the participants with regard to the synchronization of the program processing in the two subsystems, thus reducing the communication load.
Claims12
A method for operating a redundant automation system provided with a first subsystem and a second subsystem, which subsystems each process a control program while controlling a technical process, one of said subsystems operating as a master and another of said subsystems operating as a slave which functions as the master if the master fails, the method comprising the steps of:
- processing sections of the control program to be processed using the master;
- transmitting from the master a release to the slave via one of (i) a field bus and (ii) a synchronization connection in each case one of (i) after a predefined interval of time has expired and (ii) after an event has occurred;
- and
- processing, based on the release, those processing sections of the control program to be processed in a temporally asynchronous manner using the slave which corresponds to those processing sections of the control program to be processed using the master which has already been processed up to the release.
A redundant automation system including a first subsystem and a second subsystem, which subsystems each process a control program while controlling a technical process, one of said subsystems operating as a master and another of said subsystem operating as a slave which functions as the master if the master fails;
- wherein the master is configured to process processing sections of the control program to be processed using the master and to transmit a release to the slave via one of (i) a field bus and (ii) a synchronization connection in each case one of (i) after a predefined interval of time has expired and (ii) after an event has occurred;
- and
- wherein the slave is configured to process based on the release, processing sections of the control program to be processed in a temporally asynchronous manner using the slave which correspond to those processing sections of the control program to be processed by the master which have already been processed up to the release.
A slave for a redundant automation system having a master and another slave, the master and the slave each processing a control program while controlling a technical process, and the slave functioning as the master if the master fails;
- wherein the slave is configured to process, based on a release transmitted via one of (i) a field bus and (ii) a synchronization connection by the master processing sections of the control program to be processed using the slave which correspond to those processing sections of the control program to be processed by the master which have already been processed up to the release;
- and
- wherein the slave is further configured to process further processing sections of its control program in a temporally asynchronous manner only if the master transmits a further release to the slave after this processing.
A master for a redundant automation system having a slave and the master, the master and the slave each processing a control program while controlling a technical process, and the slave functioning as the master if the master fails;
- wherein the master is configured to process processing sections of the control program to be processed using the master and to transmit a release to the slave via one of (i) a field bus and (ii) a synchronization connection in each case one of (i) after a predefined interval of time has expired and (ii) an event has occurred, the release indicating to the slave that it should process processing sections of the control program to be processed in a temporally asynchronous manner using the slave which correspond to those processing sections of the control program to be processed by the master which have already been processed up to the release.
Dependencies are inferred from the claim text.