Method for download of sequential function charts to a triple module redundant control system
First Claim
1. A method, comprisingdownloading application code to a first controller of a triple module redundant (TMR) system of three controllers, wherein a first controller comprises a designated controller configured to provide state information to a second controller and a third controller;
- downloading the application code to the second controller after downloading to the first controller;
sending state information from the first controller to the second controller; and
switching the designated controller from the first controller to the second controller or the third controller after downloading to the first controller.
2 Assignments
0 Petitions
Accused Products
Abstract
Embodiments of the present invention include systems and methods for an online load of logic to a triple module redundant (TMR) control system using a cascading switch and designated controller. Application code having SFC logic may be first downloaded to a designated controller of the TMR system. After download to the designated controller, the other controllers of TMR system may be updated in a cascading (circular) pattern. After updating the second controller with the updated logic, the designated controller may provide correct state information to the second controller.
-
Citations
18 Claims
-
1. A method, comprising
downloading application code to a first controller of a triple module redundant (TMR) system of three controllers, wherein a first controller comprises a designated controller configured to provide state information to a second controller and a third controller; -
downloading the application code to the second controller after downloading to the first controller; sending state information from the first controller to the second controller; and switching the designated controller from the first controller to the second controller or the third controller after downloading to the first controller. - View Dependent Claims (2, 3, 4, 5, 6, 7)
-
-
8. A system comprising:
-
a triple module redundant (TMR) control system comprising three controllers; and a tangible machine-readable medium comprising code adapted to; determine a designated controller of the control system; update the designated controller with application code during an online load; update a second controller of the control system with the application code during the online load after updating the designated controller, wherein the second controller receives state information from the designated controller; update a third controller of the control system with the application code during the online load after updating the designated controller and the second controller; and determine a new designated controller after updating the designated controller with the application code. - View Dependent Claims (9, 10, 11, 12, 13)
-
-
14. A system, comprising:
a triple module redundant control (TMR) system comprising a first controller, a second controller, and a third controller, wherein the first controller comprises a designated controller configured to provide state information to the second controller and the third controller, wherein the first controller receives updated application code before the second controller and the third controller such that the first controller comprises an updated state based on the updated application code before the second controller and the third controller receive the updated application code;
wherein the designated controller is switched from the first controller to the second controller or the third controller after the first controller receives the updated application code.- View Dependent Claims (15, 16, 17, 18)
Specification