SAFETY COMPUTING DEVICE, SAFETY INPUT DEVICE, SAFETY OUTPUT DEVICE, AND SAFETY CONTROLLER

摘要

A safety computing device includes a processor and a memory. The memory includes a first memory area and a second memory area having an address different from the first memory area. The processor includes an execution control unit performing a first process including the program process on input data written in the first memory area, and a second process including the program process on input data written in the second memory area and addition of redundancy code to output data written in the second memory area, a result collating unit collating output data to which redundancy code is added in the first and second processes, a computation diagnosis unit diagnosing presence or absence of failure in the processor and the memory, and an abnormality processing unit that, when an abnormality is detected by at least one of redundancy check, collation, and diagnosis, stops outputting output data.

主权项

1. A safety computing device comprising:
a processor that executes a program process on input data; and a memory that stores the input data input to the processor and output data that is a result of the program process, wherein the memory is capable of storing the input data and the output data in each of a first memory area and a second memory area having an address different from an address of the first memory area, and the processor includes
an execution control unit that performs a first process, which includes the program process performed on the input data written in the first memory area and addition of a redundancy code to the output data that is a result of the program process and is written in the first memory area, and a second process, which includes the program process performed on the input data written in the second memory area and addition of a redundancy code to the output data that is a result of the program process and is written in the second memory area,a result collating unit that collates the output data to which the redundancy code is added in the first process and the output data to which the redundancy code is added in the second process,a computation diagnosis unit that diagnoses, by computation, presence or absence of a failure in the processor and the memory, andan abnormality processing unit that, when an abnormality is detected by at least one of a redundancy check performed on the input data and the output data, a collation performed by the result collating unit, and a diagnosis performed by the computation diagnosis unit, stops outputting the output data.