| 摘要 |
A programmable logic controller (14) for an industrial control system (10) comprises an application logic execution layer (42) and at least one of an update checking layer (40) and an output checking layer (44). The application logic layer (42) is adapted for receiving sensor input data (32) from at least one sensor (16) coupled to the programmable logic controller (14) and for processing the sensor input data (32) to generate an output parameter (30) for an actuator (18). The output checking layer (44) is adapted for receiving the output parameter (30), for checking the output parameter, whether the output parameter is an allowed output parameter corresponding to a list (52) of allowed output parameters; and for outputting only an allowed output parameter to the actuator (16). The update checking layer (40) is adapted for receiving application logic update data (50), wherein the application logic update data contains information for updating the application logic (43). The update checking layer (40) is adapted for checking the application logic update data (50), whether the application logic update data is allowed application logic update data, by verifying, whether every application logic update defined by the application logic update data (50) corresponds to an application logic update in a list (48) of allowed logic updates, and for updating the application logic (43), only if the update data is allowed application logic update data. |
