Method for monitoring a first processor of a sensor module by means of a second processor

Patent metadata

Field	Value
Publication number	US-12487589-B2
Application number	US-202118006439-A
Country	US
Kind code	B2
Filing date	Jun 21, 2021
Priority date	Jul 22, 2020
Publication date	Dec 2, 2025
Grant date	Dec 2, 2025

Abstract

The present disclosure relates to a method for monitoring a first processor using a second processor in a field device, comprising the following method steps: calculating verification data on the basis of specified input data using a test algorithm on an external computing unit storing the input data and the verification data computed by the test algorithm; transferring the specified input data stored in the sensor module and the verification data; transferring the specified input data; executing the test algorithm on the first processor; making the calculated output data available on the second processor; checking the output data with the verification data using the second processor and, if the output data do not correspond to the verification data, establishing a malfunction.

First claim

The invention claimed is:

1 . A method for monitoring a first digital processor integrated into a sensor module of a field device of automation technology and having a first set of machine commands on which, in order to calculate a measured value on the basis of supplied raw measured values, an algorithm is executed using a second digital processor integrated into a main electronics module of the field device, said method comprising the following method steps:
calculating verification data on the basis of specified input data using a test algorithm on an external computing unit that is independent of the field device, wherein the test algorithm is divided into at least one initial section and an end section, wherein the at least one initial section and the end section comprise at least one opcode of the first set of machine commands used while executing the algorithm on the first processor;
storing the specified input data specified for calculating the verification data and the verification data calculated using the test algorithm in the sensor module of the field device;
transmitting the specified input data stored in the sensor module and the verification data to the main electronics module;
transmitting the specified input data from the main electronics module to the sensor module during measuring operation of the field device;
executing the test algorithm on the first digital processor of the sensor module in such a way that output data are calculated on the basis of the specified input data transmitted from the main electronics module, wherein the algorithm between the initial section and the end section is executed such that, after the test algorithm has been executed, the algorithm can be checked on the basis of the verification data whether the algorithm has been run through completely;
making the output data calculated using the first digital processor available in the main electronics module;
checking, using the second digital processor of the main electronics module, the output data with the verification data that is made available by the sensor module and, if the output data does not correspond to the verification data, determining a malfunction.

2 . The method according to claim 1 , wherein the method steps of transmitting the specified input data from the main electronics module to the sensor module during measuring operation of the field device, the executing step, the making step, and the checking step are carried out cyclically during measuring operation of the field device.

3 . The method according to claim 1 , wherein the method step of transmitting the specified input data stored in the sensor module and the verification data to the main electronics module is carried out during a system start-up of the field device.

4 . The method according to claim 1 , wherein the method step of storing the input data specified for calculating the verification data and the verification data computed using the test algorithm in the sensor module of the field device is carried out during manufacture of the sensor module.

5 . The method according to claim 1 , wherein, during actual measuring operation of the field device, raw measured values are cyclically fed to the first digital processor, and the raw measured values during actual measuring operation are cyclically processed further by the first processor using the algorithm.

6 . The method according to claim 1 , wherein, during actual measuring operation of the field device, the raw measured values are fed to the first digital processor and are processed further using the algorithm at a higher clock rate than that at which the test algorithm is executed with the specified input data.

7 . The method according to claim 1 , wherein, after the method steps of executing, making and checking are carried out, when carried out again, they are carried out with other input data which were previously transmitted from the sensor module to the main electronics module.

8 . The method according to claim 1 , wherein the algorithm is divided into several sections, and, when executed, the several sections of the algorithm between the initial section and the end section are executed.

9 . The method according to claim 8 , wherein the test algorithm is also divided into several sections, and, when executed, the sections of the algorithm and of the test algorithm are executed in an alternating manner.

10 . The method according to claim 1 , wherein the verification data are calculated on a manufacturing computer during manufacture of the sensor module by the manufacturer of the sensor module.

11 . The method according to claim 10 , wherein the verification data are calculated on the manufacturing computer using a numerical calculation tool.

Assignees

• Endress Hauser Se Co Kg

Inventors

• Karweck Lars
• Zieringer Thomas
• Müller Stefan
• Schmitt Eric

Classifications

• G05B19/41865

  characterised by job scheduling, process planning, material flow · CPC title

• G06F11/1637

  using additional compare functionality in one or some but not all of the redundant processing components · CPC title

• G05B2219/25428

  Field device · CPC title

• G05B19/4185 Primary

  characterised by the network communication · CPC title

• G05B23/0256 Primary

  injecting test signals and analyzing monitored process response, e.g. injecting the test signal while interrupting the normal operation of the monitored system; superimposing the test signal onto a control signal during normal operation of the monitored system · CPC title