Patent Application
20050081120
The invention lies in the field of automation controllers or automation systems. Automation systems or controllers are used in particular in the case of production machines, machine tools, manipulators, industrial processes and/or in industrial production operations.
Automation systems have to meet a wide variety of requirements, such as, flexible, reliable, and/or consistent reactions to events, for example:
These requirements apply in particular to a freely programmable automation system or controller. If the automation controller or the automation system (the terms controller and automation system may be accepted as synonyms to each other although the automation system may also include an automation controller) have multitasking properties, the requirements become more rigorous. This applies, for example, to a freely programmable automation system for a production machine, such as for example, a printing machine or a plastics injection-molding machine with multitasking properties, which on account of integrated technology and automatic control functionality has to conform to hard real-time properties. Real-time properties are also required, for example, in the case of a machine tool, such as for example a lathe, a grinding machine, a milling machine, etc., or in the case of one or more manipulators operating together.
The automation controller or the automation system has software, with tasks, i.e. functions, or programs, or jobs being started and processed, or capable of being processed, in this software. In an automation controller or in an automation system, the requirements described above have previously been met by means of synchronous exceptions, in particular whenever near real-time requirements have to be satisfied. With the synchronous exception, at least one user program is immediately started, as a reaction to an error, with the same priority as the processed task in which an error has occurred.
A disadvantage of this solution is that the solution with synchronous exceptions can only be used to a restricted extent in an automation system or in an automation controller with high-priority cyclical tasks, since the total running time of the high-priority cyclical task levels is limited. If this limitation is exceeded, the real-time property is lost. If synchronous exceptions are used, a real-time automation system cannot be realized, since real time is not guaranteed in every case. This problem also generally occurs in the case of other real-time systems in which high-priority tasks are to be processed in a maximum total running time which is necessary for processing.
The invention is based on the object of improving the reaction to errors which occur in the software (for example division by zero or infringement of array limits) and/or hardware (for example access errors in the case of I/O variables) of an automation controller or an automation system. Automation systems or controllers are used in particular in the case of production machines, machine tools, manipulators, industrial processes and/or in industrial production operations.
This object is achieved according to the invention by a method for error handling in an automation system, which is, for example, an automation controller, in which at least one error reaction function is triggered by at least one processing error and/or at least one access error, the error reaction function being at least parameterizable and/or programmable.
The parameterizability and/or programmability of an error reaction function makes it possible to form the error reaction function in such a way that the real-time properties of an automation system are retained even in the event of an error. A wide variety of requirements have to be met by automation systems, in particular real-time automation systems. These are, for example, flexible, reliable, and/or consistent reactions to:
These requirements are to be met in particular in the case of a freely programmable automation system for a production machine with multitasking properties, since, for example, on account of integrated technology and automatic control functionality, it has to conform to hard real-time properties. A hard real-time property means that the real-time property is retained even in the event of an error. In the case of automation systems without hard real time (i.e. in the event of an error for example, they no longer have the real-time property), the handling of an error that has occurred has previously been achieved by means of synchronous exceptions, which are user programs which are started immediately with the same priority as the processed task/function in which an error occurs.
If the automation system, i.e. the automation controller, has various execution levels, these have, for example, different priorities. Programs, functions, tasks, or jobs can be processed on various execution levels. If an error occurs in a program, a job, a function, or the like on one execution level, an error reaction function can be executed, but may influence programs or functions on the execution levels in the timing with which they are processed, in such a way that a required processing time of another program or a function can no longer be ensured.
An improved error reaction can also be achieved according to the invention in that, for error handling in the case of an automation system which has at least two execution levels, in which at least one processing error and/or access error on one execution level causes at least one error reaction function to be triggered on at least one of the further execution levels.
The fact that a further execution level, which has a different priority than the original execution level, is used for an error reaction function makes it possible to influence the time sequence of programs or functions. The choice of the execution level for the error reaction function is advantageously programmable or parameterizable.
In an advantageous refinement of the method for error handling, the error reaction function is respectively handled on the further execution level, which has lower priority than the respective execution level on which the processing error and/or the access error occurred. This has the advantage that the time sequence in which the error has occurred remains substantially uninfluenced by the error. Under some circumstances, however, a simple time-uncritical command, such as the adoption of a last permissible value may, for example, be carried out when an impermissible value occurs.
An error reaction function can also be triggered by the processing error and/or the access error on the same execution level as the processing error and/or access error, or is triggered there, a further error reaction function being triggered on at least one execution level of lower priority.
In this way, firstly, reliable further processing of the program or the function in which the error has occurred is ensured without problems arising, for example, with respect to the meeting of real-time requirements. Error handling that is no longer as time-critical then takes place by the error reaction function started on an execution level of lower priority.
The implementation of a method for error handling in the case of an automation system, i.e. in the case of an automation controller, which is used as a real-time automation system is particularly advantageous.
The method for error handling according to the invention is consequently used advantageously in the case of real-time requirements and also satisfies these requirements. This applies in particular to an automation system with high-priority cyclical tasks, the control quality remaining ensured. High requirements for control quality and dynamics of an automation system are still met. In an advantageous refinement, the error reaction function is parameterized and/or programmed before it is triggered.
The requirement for a flexible, reliable, and/or consistent reaction to errors is made possible according to the invention by a thorough consistent overall approach to error handling by means of the definition/realization of:
In the definition or realization of access functions, access errors can be corrected by means of parameterizable access functions, the possibility of producing a predefined behavior in the event of an error advantageously existing. Examples of this are the adoption of a projected substitute value, the adoption of the last value and/or also the use of a limit value. The behavior of the access function on the basis of parameters can be set before it is called up or immediately when it is called up. The fixing of a predefined behavior in the event of an error of an access function is an error reaction function. The execution of the access function in the event of an access error does not necessarily mean the starting of an error processing task, i.e. an error reaction function that is synonymous, but an error reaction function can be executed. The access function can advantageously be used in various types of task, preferably every type of task.
When an error occurs for example during access to an internal or external value and non-application of the access function, a defined configurable execution behavior can advantageously be realized when there is at least one access error. If an access error occurs without an access function being used, a configured behavior is executed by the automation system or the automation controller, such as, the adoption of the substitute value, the adoption of the last value, or the starting of an error processing task in which the reaction can be flexibly eliminated by programming.
If a processing error occurs in a user program, a defined behavior, which can be set, with respect to the processing error is made possible according to the invention. The following possibilities are obtained for example for this:
The error processing task, i.e. the error reaction function, has in this case, for example, one of the following properties:
Consequently, consistent system and execution behavior can be achieved even in hard real-time systems.
Access errors can be corrected directly in flexible parameterizable access functions by the configuration according to the invention of an automation system. Reactions to access errors and processing errors can also be programmed in an error reaction function, the error reaction function being started in the event of an error. The error handling according to the invention advantageously does not involve abnormal termination or influencing of high-priority cyclical system tasks, as occur for example in the case of motion control tasks. Such tasks are, for example, interpolation and/or automatic control.
With the aid of the error handling according to the invention, reliable system behavior of the automation system can be achieved even in such a way that it is possible to end the task in which an error has occurred. In an advantageous way, non-cyclical tasks can be newly set up, i.e. can be started. When newly setting up non-cyclical tasks, either the starting values of the original task or else interim results of the aborted task are used.
The error handling according to the invention advantageously involves controlled shutting down, i.e. running down or stopping, of the system where at least one error occurs in a cyclical task, since repeated processing and/or abnormal termination of the cyclical task is not necessarily appropriate in this case. Consistent system behavior is advantageously achieved according to the invention even when the system does not stop.
In an advantageous way, according to the invention, the maximum permissible total running time of a high-priority cyclical task is not exceeded, in order to ensure agreed closed-loop and/or open-loop control quality. This applies, in particular, to the case of automation controllers and/or automation systems, where it may be possible for these terms to be used synonymously, with hard real-time requirements.
The automation system according to the invention is advantageously used in the case of a production machine and/or a machine tool.
Further advantageous configurations and a use and/or device for the invention can be taken from claims 1 to 15.
Exemplary embodiments of the invention are represented in the figures.
In accordance with an aspect of the present invention,
The representation according to
The error processing task corresponds to an error reaction function. The tasks NZT, NNT, IT, HZT, HZST and FT are allocated to execution levels A, the execution levels A having different priorities P with respect to processing and being divided into the execution levels 1A, 2A, 3A and 4A. The priority P, which is represented as a downwardly pointing arrow, increases in the direction of the arrow. The tasks are represented by rectangular boxes, each box being assigned at least one task. The time sequence of the tasks NZT, NNT, IT, HZT, HZST and FT1/2/3 is given by the perspective representation with reference to a time axis Z represented as an arrow.
The error processing tasks FT1, FT2, FT3 are assigned to different execution levels 1A and 2A, on the basis of priority. Provided along with them on the corresponding execution levels A are also the interrupt tasks IT, and/or the low-priority cyclical tasks NZT, and/or the low-priority non-cyclical tasks NNT.
In the case of the following tasks: low-priority cyclical task NZT, low-priority non-cyclical task NNT, interrupt task IT, high-priority cyclical task HZT and the error processing task, access functions can be used in all the user tasks.
If, for example, an error F occurs on the execution level 2A of the interrupt task IT, an error processing task FT1 can be started on the same execution level 2A. However, an error processing task FT2 or FT3 can also be started on a lower-priority execution level 1A. The starting of a lower-priority error processing task FT2, FT3 may also take place by another error processing task FT1. The execution of error processing tasks FT1, FT2, i.e. of error reaction functions, on a low-priority execution level saves computing time of a computer for higher-priority tasks. Consequently, a real-time automation system can be realized. This also satisfies hard real-time requirements, in particular in the case of an error.
| Number | Date | Country | Kind |
|---|---|---|---|
| 101-64-495.7 | Dec 2001 | DE | national |
| Filing Document | Filing Date | Country | Kind |
|---|---|---|---|
| PCT/DE02/04711 | 12/23/2002 | WO |
