Safety-related control device and method for operating a safety-related control device

1. A safety-related control device for controlling an actuator, the safety-related control device comprising:

a first microcontroller having a first processing core configured to provide a safety function for generating and/or processing a signal for a safety-related control of the actuator; and

a second microcontroller electrically connected to the first microcontroller and having a second processing core, the second processing core being configured to provide an operating and/or additional function for the generation, processing, diagnostics, reproduction and/or output of further signals associated with the operation of the control device and/or of the actuator, and further being configured to provide a test function for monitoring the functionality of the safety function,

wherein the safety function is designed to send a test signal to the test function, in order to cause the test function to execute a monitoring operation in relation to the safety function, and

wherein the second microcontroller has information relating to the times and/or the content of the transmission of the test signal and is designed to adapt the provision of the test function and/or of the operating and/or additional function on the basis of this information.

2. A method for operating a safety-related control system, the safety-related control system comprising:

a programmable logic controller;

a safety-related control device electrically connected to the programmable logic controller and being configured as a control head or a positioner; and

an actuator connected to the safety-related control device, the actuator being configured as a process valve and having a valve member,

wherein the control device comprises:

a first microcontroller electrically connected between the programmable logic controller and the actuator, the first microcontroller having a first processing core configured to provide a safety function for generating and/or processing a signal for a safety-related control of the actuator in order to move the valve member in a closed position or an open position, and

a second microcontroller electrically connected between the programmable logic controller and the actuator, the second microcontroller having a second processing core, the second processing core being configured to provide an operating and/or additional function for the generation, processing, diagnostics, reproduction and/or output of further signals associated with the operation of the control device and/or of the actuator, and being furthermore configured to provide a test function for monitoring the functionality of the safety function, and

wherein the method comprises:

providing a safety function for generating and/or processing a signal for a safety-related control of the actuator on the first processing device;

providing an operating and/or additional function for generating, processing, diagnostics, reproduction and/or transmission of further signals associated with the operation of the control device and/or of the actuator on the second processing device; and

providing a test function for monitoring the functionality of the safety function on the second processing device.

3. A safety-related control system comprising:

a programmable logic controller;

a safety-related control device electrically connected to the programmable logic controller and being configured as a control head or a positioner; and

an actuator connected to the safety-related control device, the actuator being configured as a process valve and having a valve member,

wherein the control device comprises:

a first microcontroller electrically connected between the programmable logic controller and the actuator, the first microcontroller having a first processing core configured to provide a safety function for generating and/or processing a signal for a safety-related control of the actuator in order to move the valve member in a closed position or an open position, and

a second microcontroller electrically connected between the programmable logic controller and the actuator, the second microcontroller having a second processing core, the second processing core being configured to provide an operating and/or additional function for the generation, processing, diagnostics, reproduction and/or output of further signals associated with the operation of the control device and/or of the actuator, and wherein the second processing core is furthermore configured to provide a test function for monitoring the functionality of the safety function.

4. The safety-related control system according to claim 3 , wherein the first processing device includes a first processor core and/or a logic module and is configured to provide the safety function on the first processor core and/or on the logic component, and the second processing device includes a second processor core and is configured to provide the test function and the operating and/or additional function on the second processor core.

5. The safety-related control system according to claim 3 , wherein the first processing device includes a first microcontroller and/or the second processing device includes a second microcontroller.

6. The safety-related control system according to claim 3 , wherein the operating and/or additional function is a non-safety-related function.

7. The safety-related control system according to claim 3 , wherein the safety function is designed to send a test signal to the test function, in order to cause the test function to execute a monitoring operation in relation to the safety function.

8. The safety-related control system according to claim 3 , wherein the test function is designed as a software module.

9. The safety-related control system according to claim 3 , wherein the second processing device includes a diagnostics function for checking the validity of the test function.

10. The safety-related control system according to claim 3 , wherein the test function is configured to influence the operation of the operating and/or additional function and/or to access the operating and/or additional function.

11. The safety-related control system according to claim 7 , wherein the second microcontroller has information relating to the times and/or the content of the transmission of the test signal and is designed to adapt the provision of the test function and/or of the operating and/or additional function on the basis of this information.