← Back
Home › Systems › Energy, industry and public infrastructure

safety-instrumented-system

safety instrumented system on certified safety PLCs

Schneider Triconex, HIMA HIMax, Yokogawa ProSafe-RS

SystemTechniques · 9Primitives · 33 safety-instrumented-sys… Clock synchronizationdistributed · medium: Estimate a clock's offset from four timestamps, filter out queueing noise, and steer the clock smoothly; NTP gets about a millisecond, PTP with hardware timestamps under a microsecond.›Alarm managementembedded · medium: Turn raw process limits into a few actionable operator alarms with delay, deadband, acknowledge and shelving states, plus flood measurement.›Fault tree analysisembedded · medium: Write the unwanted top event as AND/OR logic over component failures, reduce it to minimal cut sets, then compute its probability and each failure's share.›Industrial network segmentationembedded · medium: Zones and conduits (IEC 62443/Purdue) with firewalls and protocol allow-lists for OTPlc scan cycleembedded · medium: Cyclic read-inputs, execute-logic, write-outputs execution with IEC 61131-3 programsSafety-critical coding standardsembedded · medium: Which rule sets (MISRA C, CERT C, JPL Power of Ten, Rust lint subsets) apply when software must not fail, what they forbid, and how to enforce them in CI.›Safety monitor architectureembedded · medium: Independent doer/checker safety monitor that forces a safe state when the main channel misbehavesFixed-rate control loopembedded · low: Run a controller at an exact period using absolute deadlines and a fixed dt, so jitter never accumulates and the math stays valid.›Real time fieldbusembedded · low: Deterministic cyclic fieldbuses (EtherCAT, PROFINET IRT): on-the-fly frames, distributed clocksWatchdog timerembedded · low: A hardware down-counter that resets the chip unless software proves, in time and in a plausible pattern, that it is still healthy.›End to end protection e2eembedded · low: Per-message counter, ID and CRC over a black channel to detect loss, repetition, corruption, delayRedundancy votingembedded · low: N-modular redundancy and MooN voting (2oo3, TMR) with discrepancy detectionMemory self test marchembedded · low: March RAM tests, ROM CRCs and CPU self-tests required by safety standardsModbus protocolembedded · low: Modbus RTU/TCP registers and function codes with polling and CRCCRC32C checksumshardware-os · low: The Castagnoli CRC-32 with dedicated instructions on x86 (SSE4.2) and ARMv8. It is the standard fast integrity check for storage blocks, logs and network frames.›PID controllerrobotics · low: Drive a measured value to a setpoint with three terms on the error: proportional, integral, derivative. The default feedback loop for motors, heaters, drones and gimbals.›Phase-locked loop (digital)signal-processing · low: Feedback loop that locks a local oscillator to the phase and frequency of an input tone; the core of carrier recovery, clock recovery and GNSS tracking.›Robust statisticsstatistics · low: Location and scale estimates (median, MAD, trimmed mean, Huber M-estimator) that stay correct when a minority of the data is garbage.›Debouncing throttlingsystems · low: Coalescing rapid events: debounce (wait for quiet), throttle (max rate), and cancelling stale in-flight requestsHierarchical state machinesystems · low: Nest states so a substate inherits its parent's reactions and only overrides what differs, with ordered entry and exit actions along the path.›BFS and DFSgraphs · low: The two basic graph traversals; BFS gives hop distances and levels, DFS gives discovery/finish order for cycles, components and topological order.›Binary decision diagramsoptimization · low: A reduced ordered BDD stores a Boolean function as a shared DAG that is unique per variable order, so equivalence is one integer compare and counting is one pass.›Data diode unidirectional transferembedded · low: One-way network transfer with FEC and no back channel between safety and IT zones+ 2 more techniques+ 17 more primitives

Similar systems

Share the most building blocks with this one.