Method for operating a program-controlled controller

摘要

For a program-controlled fail-safe controller (AG) constructed with two subsystems (AB) in a redundant manner, it is proposed to provide two identical program sequences and to carry out a mutual synchronisation of the program sequences at the beginning of particular program sections by the operating system (BS). This synchronisation can also be called up at any program points by the user program. The operating system also intersperses the individual elements of a self test into the program sequence in dependence on the instantaneous process load in order to minimise the processor load. <IMAGE>