Field device with separated memory areas
First Claim
Patent Images
1. A field device for measuring one of a filling level, a pressure and a density of a medium in a container, comprising:
- a data memory storing data of first and second program modules, the data memory including at least two memory areas;
a first memory area and a second memory area, the first area being separated from the second area,wherein the data of the first and second program modules includes first data and second data, the first data being required for a safe operation of the field device and categorized as safety-critical, the second data not being required for the safe operation of the field device and categorized as safety-uncritical,wherein the first memory area stores the first data and the second memory area only stores the second data,wherein the first program modules are categorized as safety-critical and have access to the data stored in the first memory area,wherein the second program modules are categorized as safety-uncritical and do not have access to the data stored in the first memory area,wherein a measured value is stored in the first memory area as well as in the second memory area,wherein the first memory area includes a first data of a first program module that is designed for executing a function that is selected from the group comprising at least one of determination of measured values as a function of sensor measuring data, derivation of additional measured values as a function of already determined measured values, and output of measured values, which the first program module is configured to access the measured value stored in the first memory area, andwherein the second memory area includes a second data of a second program module that is designed for executing a function that is selected from the group comprising at least one of recording measured values with status information as a function of the time and indicating measured values, which the second program module is configured to access the measured value stored in the second memory area.
1 Assignment
0 Petitions
Accused Products
Abstract
A field device for measuring a filling level, a pressure or a density of a medium in a container includes data memory with two memory areas that are separated from one another. First data for safety-critical program modules is stored in the first memory area. Second data for safety-uncritical program modules is stored in the second memory area. The two memory areas are separated from one another. All access to these memory areas is controlled by a memory management unit.
-
Citations
12 Claims
-
1. A field device for measuring one of a filling level, a pressure and a density of a medium in a container, comprising:
-
a data memory storing data of first and second program modules, the data memory including at least two memory areas;
a first memory area and a second memory area, the first area being separated from the second area,wherein the data of the first and second program modules includes first data and second data, the first data being required for a safe operation of the field device and categorized as safety-critical, the second data not being required for the safe operation of the field device and categorized as safety-uncritical, wherein the first memory area stores the first data and the second memory area only stores the second data, wherein the first program modules are categorized as safety-critical and have access to the data stored in the first memory area, wherein the second program modules are categorized as safety-uncritical and do not have access to the data stored in the first memory area, wherein a measured value is stored in the first memory area as well as in the second memory area, wherein the first memory area includes a first data of a first program module that is designed for executing a function that is selected from the group comprising at least one of determination of measured values as a function of sensor measuring data, derivation of additional measured values as a function of already determined measured values, and output of measured values, which the first program module is configured to access the measured value stored in the first memory area, and wherein the second memory area includes a second data of a second program module that is designed for executing a function that is selected from the group comprising at least one of recording measured values with status information as a function of the time and indicating measured values, which the second program module is configured to access the measured value stored in the second memory area. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
-
9. A method for measuring and determining one of a filling level, a pressure and a density of a medium in a container using a field device, comprising:
-
executing first program modules that are required for a safe operation of the field device and categorized as safety-critical, wherein first data relating to the first program modules is stored in a first memory area of a data memory; executing second program modules that are not required for the safe operation of the field device and categorized as safety-uncritical, wherein second data relating to the second program modules is stored in a second memory area of the data memory; storing a measured value redundantly in the first memory area as well as in the second memory area, accessing the measured value stored in the first memory area with a first program module that is designed for executing a function that is selected from the group comprising at least one of determination of measured values as a function of sensor measuring data, derivation of additional measured values as a function of already determined measured values, and output of measured values, and accessing the measured value stored in the second memory area with a second program module that is designed for executing a function that is selected from the group comprising at least one of recording measured values with status information as a function of the time and indicating measured values, wherein the first area is separated from the second area, and wherein program modules that are categorized as safety-uncritical do not have access to the data stored in the first memory area. - View Dependent Claims (10)
-
-
11. A program element embodied on a non-transitory computer-readable medium for measuring and determining one of a filling level, a pressure and a density of a medium in a container using a field device, wherein the program element instructs a processor to carry out the following steps when it is executed on the processor:
-
executing first program modules that are required for a safe operation of the field device and categorized as safety-critical, wherein first data relating to the first program modules is stored in a first memory area of a data memory; executing second program modules that are not required for the safe operation of the field device and categorized as safety-uncritical, wherein second data relating to the second program modules is stored in a second memory area of the data memory; storing a measured value redundantly in the first memory area as well as in the second memory area, accessing the measured value stored in the first memory area with a first program module that is designed for executing a function that is selected from the group comprising at least one of determination of measured values as a function of sensor measuring data, derivation of additional measured values as a function of already determined measured values, and output of measured values, and accessing the measured value stored in the second memory area with a second program module that is designed for executing a function that is selected from the group comprising at least one of recording measured values with status information as a function of the time and indicating measured values, wherein the first area is separated from the second area, and wherein program modules that are categorized as safety-uncritical do not have access to the data stored in the first memory area.
-
-
12. A non-transitory machine-readable medium, on which a program element for measuring and determining one of a level, a pressure and a density of a medium in a container using a field device is stored, wherein the program element instructs a processor to carry out the following steps when it is executed on the processor:
-
executing first program modules that are required for a safe operation of the field device and categorized as safety-critical, wherein first data relating to the first program modules is stored in a first memory area of a data memory; executing second program modules that are not required for the safe operation of the field device and categorized as safety-uncritical, wherein second data relating to the second program modules is stored in a second memory area of the data memory; storing a measured value redundantly in the first memory area as well as in the second memory area, accessing the measured value stored in the first memory area with a first program module that is designed for executing a function that is selected from the group comprising at least one of determination of measured values as a function of sensor measuring data, derivation of additional measured values as a function of already determined measured values, and output of measured values, and accessing the measured value stored in the second memory area with a second program module that is designed for executing a function that is selected from the group comprising at least one of recording measured values with status information as a function of the time and indicating measured values, wherein the first area is separated from the second area, and wherein program modules that are categorized as safety-uncritical do not have access to the data stored in the first memory area.
-
Specification