Field Device Memory Management for Safety-Critical Data Transfer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional field devices with functional safety features face limitations in changing sensor measurement ranges due to restrictions on data transfer between safety-critical and safety-uncritical memory regions, leading to reduced convenience and increased certification costs.
Innovation Solution
A field device with separate processing units for safety-critical and safety-uncritical data, allowing controlled transfer and storage of data between regions while maintaining functional safety standards, enabling changes to sensor settings and reducing certification scope.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is stored in separate safety-critical and safety-uncritical memory regions, then functional safety is improved, but data transfer flexibility deteriorates
Solution Approach 1:
A memory management apparatus is introduced as an intermediary between the first processing (safety-critical) and second processing (safety-uncritical). This mediator controls and manages data transfer between the separated memory regions, enabling flexible data movement while maintaining the safety boundaries. The memory management apparatus receives transfer requests, validates them according to safety rules, and executes the transfer only when appropriate, thus resolving the contradiction between strict separation and flexible transfer.
2Device complexity
If control data is stored in safety-uncritical region, then memory management simplicity is improved, but ability to change sensor settings deteriorates
Solution Approach 1:
The memory management apparatus acts as a mediator that receives transfer requests from the second processing (safety-uncritical) to the first processing (safety-critical). When control data needs to be transferred to enable sensor setting changes, the memory management apparatus validates the transfer request and executes it according to predefined safety rules. This allows control data to be stored in the simpler safety-uncritical region while still enabling setting changes through controlled transfer.
3Reliability
If data transfer between memory regions is restricted, then functional safety is improved, but user convenience deteriorates
Solution Approach 1:
The memory management apparatus serves as a user-friendly intermediary that handles complex safety validation transparently. Users can request data transfers without needing to understand or configure safety parameters. The memory management apparatus automatically validates requests against safety rules and executes approved transfers, maintaining functional safety while providing convenient operation. This resolves the contradiction by abstracting safety complexity from the user interface.
Solution Approach 2:
The system implements self-service safety validation where the memory management apparatus automatically checks and validates transfer requests without requiring user intervention or configuration. The safety rules are embedded in the memory management logic, which autonomously determines whether transfers are appropriate and executes them accordingly. This maintains strict safety enforcement while keeping the user interface simple and convenient.
Data Source
AI summary
A field device includes one or more processors configured to perform a first processing with reference to safety-critical data and a second processing with reference to safety-uncritical data which is less critical than the safety-critical data, wherein the one or more processors are configured to generate a first request for storing the safety-critical data in the second processing, store the safety-critical data into a storage unit in the first processing in accordance with the first request, and store the safety-uncritical data into the storage unit in the second processing.