Failsafe transmission of data

• US 20050249112A1
• Filed: 05/10/2005
• Published: 11/10/2005
• Est. Priority Date: 05/10/2004
• Status: Active Grant

• Current Assignee: Siemens AG
• Original Assignee: Siemens AG
• Inventors: Schiller, Frank, Barthel, Herbert, Sigwart, Edgar
• Granted Patent: US 7,453,902 B2
• Time in Patent Office: Days
• US Class Current: 370/216
• CPC Class Codes: G05B 19/042 using digital processors G05B19/05 takes precedence
• CPC Class Codes: G05B 2219/25153 Checking communication
• CPC Class Codes: G05B 2219/25157 Checksum CRC
• CPC Class Codes: G05B 2219/25428 Field device

Abstract

The invention relates to a system and a method for the failsafe transmission of data, the system having at least one component (2, 6, 7), which is enhanced for the failsafe transmission of data. To allow the failsafe transmission of data with reduced hardware outlay, it is proposed according to the invention that the one-channel component (2, 6, 7) is enhanced for the fail-safe transmission of data in that it is connected via a bus (1) to a failsafe computer unit (8), it has a communication driver (23), which maintains the data in standard and non-standard form, the communication driver (23) maintains a marker value, which indicates whether safe replacement values or real values are used, in standard and non-standard form, a checksum is generated in the communication driver (23) from the data maintained in non-standard form and a program run control is provided to monitor execution of the program.

Claims

1-12. -12. (canceled)

13. A system for the failsafe transmission of data, comprising:

at least one one-channel component, the component comprising;

an interface for connecting the component via a bus to a failsafe computer unit;

a communication driver maintaining the data in standard and non-standard form, wherein the communication driver maintains a marker value indicating whether safe replacement values or real values are used, wherein the marker value is in standard and non-standard form, and wherein a checksum is generated in the communication driver from the data maintained in non-standard form; and

a program run control for monitoring a program flow.

14. The system according to claim 13, wherein the real values are process values, the component is a peripheral device for processing the process values, and the bus is a fieldbus.

15. The system according to claim 13, wherein the computer unit is certified to a safety standard.

16. The system according to claim 13, wherein the component is an operationally proven component extended to include the failsafe communication driver.

17. The system according to claim 13, wherein the component is provided with a disabled failsafe data supplement and an active failsafe one-channel communication driver for at least intermittent use in applications that are without relevance to safety, wherein the failsafe data supplement can be released.

18. The system according to claim 13, wherein the component is a sensor or an actuator.

19. A method for failsafe transmission of data, wherein data is transmitted in a failsafe manner with at least one one-channel component, the method comprising:

connecting the component via a bus to a failsafe computer unit;

maintaining the data in standard and non-standard form by a communication driver of the component;

maintaining a marker value by the communication driver in standard and non-standard form, wherein the marker value indicates whether safe replacement values or real values are used;

generating a checksum in the communication driver from the data maintained in non-standard form; and

monitoring an execution of a program by a program run control.

20. The method according to claim 19, wherein the method is used in process automation, wherein the real values are process values, wherein the component processes the process values as a peripheral device, and wherein the bus is a fieldbus.

21. The method according to claim 19, wherein the computer unit is certified to a safety standard.

22. The method according to claim 19, wherein the component is an operationally proven component comprising the communication driver.

23. The method according to claim 19, wherein the component having a deactivated failsafe data supplement and an active failsafe one-channel communication driver is used at least intermittently in applications that are without relevance to safety, the failsafe data supplement being released after this period.

24. The method according to claim 19, wherein the component is a sensor or actuator.

25. A one-channel component for the failsafe transmission of data, comprising:

an interface for connecting the component via a bus to a failsafe computer unit;

a communication driver maintaining the data in normal and deviant form, wherein the communication driver maintains a marker value indicating whether safe replacement values or real values are used, wherein the marker value is in normal and in deviant form, and wherein a checksum is generated in the communication driver from the data maintained in deviant form; and

a program run control for monitoring execution a program flow.

26. The component according to claim 25, wherein the real values are process values, the component is a peripheral device for processing the process values, and the bus is a fieldbus.

27. The component according to claim 25, wherein the computer unit is certified to a safety standard.

28. The component according to claim 25, wherein the component is an operationally proven component integrating the failsafe communication driver.

29. The component according to claim 25, wherein the component is provided with a disabled failsafe data supplement and an active failsafe one-channel communication driver for at least intermittent use in applications that are without relevance to safety, wherein the failsafe data supplement can be released.

30. The component according to claim 25, wherein the component is a sensor or an actuator.

31. The component according to claim 25, wherein the communication driver is a failsafe communication driver.