Abstract:
In a data processing device including two sets of circuit pairs which are respectively duplicated in two clock domains which are asynchronous to each other, an asynchronous transfer circuit that transfers a payload signal is provided between the two sets of circuit pairs. The asynchronous transfer circuit includes two sets of a pair of bridge circuits which are respectively connected to the two sets of circuit pairs, and asynchronously transfers the payload signal and a control signal indicating a timing at which the payload signal is stable on a reception side. The two sets of a pair of bridge circuits and the payload signals can be duplicated, but the control signal is not duplicated, and the received payload signal is used for timing control to supply an expected same time difference, to the pair of duplicated circuits. This enables asynchronous transfer between circuits duplicated in the asynchronous clock domains.
Abstract:
The invention relates to an computer system for carrying out safety-critical applications, said computer system comprising a plurality of node computers and a communication system. Sensor data are supplied in parallel to one or more node computers, the node computers calculating an optimized result, preferably using an optimization algorithm, in order to solve a given problem, and transmitting said optimized result, preferably for checking the safety, to a node computer which is designed as an SCFCU, said SCFCU being directly connected to the actuator controller, and the SCFCU furthermore calculating from the sensor data a simple result, which preferably meets all safety requirements, and an envelope of the simple result, and the SCFCU checking whether the resultant values, particularly those relevant to safety, of the optimized result lie within the envelope of the simple result, and, if this is the case, directly forwarding the optimized result to the actuator controller, and, if this is not the case, forwarding the simple result calculated by the SCFCU directly to the actuator control.
Abstract:
The invention concerns a fail-safe device for a data output system, the device comprising at least one memory unit (4a, 4b) for storing a set of first telegrams and a set of second telegrams, at least one input processor (1a, 1b) for selecting one of the stored first telegrams and one of the stored second telegrams; and an XOR-device (5) with a first input channel (A) for transmitting the selected first telegram, a second input channel (B) for transmitting the selected second telegram, and with an output channel (O) for transmitting a third telegram, the third telegram being the result of an XOR-operation of the first and the second telegram. Thus a composite fail safe system for Data Output Systems is provided with a simple structure.