Simplex
A single unit with full self-monitoring – the basis for the redundant configurations.
Software
GA SafeRTS
Safe runtime system for the MPU-M1 controller
What it is
SafeRTS is the runtime system by GEBHARDT Automation GmbH for the MPU-M1 safety controller. It executes application programs built from function blocks (BlueEdit2 format) deterministically and cycle-synchronously.
What an application program actually does out in the plant is decided in the runtime system: it reads the inputs, works through the function blocks and writes the outputs – cycle after cycle, in the same order and to the same timing.
Execution, communication, diagnostics and self-monitoring all live in a single firmware – developed in accordance with IEC 61508 for use up to SIL 3.
Safety by architecture
SafeRTS is designed for fault-tolerant systems from the ground up. The same firmware carries every configuration – the application does not have to be rewritten for it.
1oo2
Two units compute the same application and keep one another in step.
TMR
A cluster of three units for the highest level of fault tolerance and availability.
Keeping the redundant partners aligned is the job of our in-house SafeTP protocol (Safe Transport Protocol) – over Ethernet and dual-port RAM, with cryptographically secured transmission: every telegram is authenticated and protected against replay.
Self-monitoring
Comprehensive cyclic self-tests monitor memory, program execution and peripherals. MMU-based memory protection separates the parts of the firmware from one another, and multi-stage watchdogs ensure that a fault is detected and the system enters a safe state – even when the software can no longer help itself.
The safety case is maintained throughout the product's life: FMEDA, traceability of the safety requirements down into the code, and modification management per IEC 61508-3.
Open communication
A safety system never stands alone. SafeRTS brings along the interfaces that let the controller fit into an existing plant landscape.
Modbus TCP and RTU
Process data and diagnostics connectivity to supervisory systems – over Ethernet and serial lines.
Command and diagnostics
A dedicated interface for commissioning and service, including program download during operation (hot swap).
Syslog and SNTP
Operational diagnostics to a central log server and time synchronization, so events line up across the plant.
Quality in code
The firmware is implemented in C90 to MISRA-C, uses no C standard library at all, and builds with two independent toolchains (Keil ARMCC, GNU) – which turns each compiler into a check on the other.
A Windows simulation runs the same application logic without hardware; an extensive unit test suite with coverage measurement up to MC/DC verifies the platform-independent core.
Cybersecurity measures follow the EU Cyber Resilience Act – from secured key management to a signed update chain.
Technical facts
| Target platform | Microchip AT91SAM9G20 (ARM926EJ-S) |
|---|---|
| Safety level | Developed per IEC 61508 for SIL 3 |
| Redundancy | Simplex, 1oo2, TMR (triple-unit cluster) |
| Application programs | Function blocks (BlueEdit2), hot-swap capable |
| Communication | SafeTP (Ethernet/DPR), Modbus TCP/RTU, diagnostic server |
| Implementation | C90, MISRA-C, no C standard library |
Positioning
SafeRTS is the firmware of the MPU-M1 module and thus the foundation of the safety-related GEBHARDT systems. The application program is created in the GA BlueEdit engineering tool; keeping redundant units aligned is the job of GA SafeTP.
Questions about this product?
Our project engineers are happy to advise you on selection and dimensioning.