Method for controlling failover between redundant network interface modules

Abstract: A method by which redundant network interface modules (NIM)s interconnecting the communication buses of two local area networks communicate with one another at predetermined time intervals over the communication buses of both networks. One of the redundant pair of NIMs is designated as the primary and the other as the secondary. Contents of the information communicated between the NIMs over the communication bus of the first network includes the status of the transmitting NIMs ability to communicate with the second network and the information communicated between the NIMs over the communication bus of the second network includes the status of the transmitting NIM's ability to communicate with the first network. Based on the information exchanged, the failure of the NIMs to communicate as scheduled, and the internal status of each NIM as understood by that NIM, the NIM decide when failover from the primary NIM to the secondary NIM occurs.

Description: The following copending patent application relates to the same field as the invention of the present application: A. "Method for Control Data Base Tracking in a Redundant Processor" by P. McLaughlin et al, US-A-4 958 270, filed January 23, 1989. BACKGROUND OF THE INVENTION (1) Field of the Invention: This invention is in the field of methods by which the primary and secondary network interface modules determine their respective status and that of the networks with which they communicate to determine when the primary module shall failover in deference to the secondary and in which the secondary module determines that the primary module has failed in order to assume the role of the primary module. (2) Description of the Prior Art: Process control systems which include a hierarchy of local area networks (LAN)s have been developed. An example of such a system is described and claimed in U. Patent No. 4,607,256, which issued to Russel A. Henzel on August 18, 1986. Another such system is illustrated and described in the cross-referenced application entitled "Apparatus for Providing a Universal Interface to a Process Control System" the disclosure of which is incorporated by reference into this application. In such systems, network interface modules (NIM)s provide communication and data translation capabilities so that modules of the two networks interconnects by a NIM can communicate. The reliability and fault tolerance of process control systems are significantly increased by incorporating in each network a standby, backup, secondary, or redundant module for each of the operating modules of each network, particularly, the NIMs interconnecting the networks, as well as by providing redundant cables over which the modules of each network communicate. Because of the importance of the functions performed by NIMs, providing each NIM of a process control system with a secondary or back up has a high priority. However, there is a need for an improved method by which a primary NIM and secondary NIM of a redundant pair of NIMs in such a system communicate, and the information communicated so that both NIMs have the capability of knowing each others status and of determining, or of controlling, when the secondary NIM will take over the function of the primary NIM; or, stated another way, when the primary NIM will failover to the secondary NIM. SUMMARY OF THE INVENTION The present invention provides a method of operating a system in which redundant first and second network interface modules (NIM)s interconnect the communication buses of first and second local area networks; wherein the first interface module functions as the primary (active) interface module and the second interface module functions as the secondary (backup) interface module, the secondary interface module taking over the functions of the primary interface module on the occurrence of certain predetermined conditions, and wherein said first and second interface modules communicate with each other at regular intervals over said communication buses; the method characterised by: communicating said representations of certain predetermined conditions to cause said secondary interface module to so take over the functions of said primary interface module; each of said interface modules transmitting information to the other of said interface modules over the communication bus of said first network, which information includes the status of said second network as perceived by the transmitting interface module; each of said interface modules transmitting information to the other of said interface modules over the communication bus of said second network, which information includes the status of said first network as perceived by the transmitting interface module; and said primary interface module failing over to said secondary interface module when said primary interface module determines that it is unable to communicate with one of said networks and said secondary interface module has determined that it is able to communicate with said one network. The method may also provide one or more of the following features:- the step of the secondary NIM terminating its operation if the secondary NIM is unable to communicate with the first network; the NIMs include current operating status of the NIM originating such a communication, and the step of the secondary NIM terminating its operation if the secondary NIM detects it has suffered a hardware or a software failure; the step of the primary NIM failing over to the secondary NIM if the primary NIM detects it has suffered a hardware or a software failure; the primary NIM fails over to the secondary NIM without communicating the fact that it has suffered a hardware or a software failure to the secondary NIM. The present invention also provides a system in which redundant first and second network interface modules (NIM)s interconnect the communication buses of first and second local area networks; wherein the first interface module functions as the primary (active) interface module and the second interface module functions as the secondary (backup) interface module, the secondary interface module taking over the functions of the primary interface module on the occurrence of certain predetermined conditions, and wherein said first and second interface modules communicate with each other at regular intervals over said communication buses; the system characterised by: means for communicating said representations of certain predetermined conditions to said representations of certain predetermined conditions to cause said secondary interface module to so take over the functions of said primary interface module; means for each of said interface modules transmitting information to the other of said interface modules over the communication bus of said first network, which information includes the status of said second network as perceived by the transmitting interface module; means for each of said interface modules transmitting information to the other of said interface modules over the communication bus of said second network, which information includes the status of said first network as perceived by the transmitting interface module; and means for said primary interface module failing over to said secondary interface module when said primary interface modules determines that it is unable to communicate with one of said networks and said secondary interface module has determined that it is able to communicate with said one network. It is therefore an object of this invention to provide an improved method by which redundant network interface modules interconnecting the communication buses of two local area networks determine when the primary NIM shall failover to the secondary NIM based on information exchanged between the two modules over the media of the two networks. It is another object of this invention to provide an improved method by which redundant network interface modules interconnecting the communication buses of two local area networks determine when the primary shall fail over to the secondary without requiring any dedicated redundancy hardware. It is still another object of this invention to provide an improved method for controlling failover of a primary network interface module to the secondary network interface module in a process control system. It is yet another object of this invention to provide an improved method for controlling failover of a primary network interface module to the secondary network module in a process control system within a predetermined period of time after the occurrence of a fault causing failover to prevent interrupting the process being controlled by the system. BRIEF DESCRIPTION OF THE DRAWINGS Fig. 1 is a schematic block diagram of a process control system, the two local area networks of which are provided with redundant network interface modules which practice the method of this invention. Fig. 2 is a truth table of conditions that determine when failover of the primary NIM to the secondary NIM occurs, when the secondary NIM terminates operation, and when no action takes place. DETAILED DESCRIPTION In Figure 1, process control system 10 includes local control network (LCN) 12, only a portion of which is illustrated, and universal control network (UCN) 14. LCN 12 includes a communication bus 16, which in the preferred embodiment comprises redundant coaxial cables 16A and 16B, and UCN also includes a communication bus 18 which in the preferred embodiment also comprises redundant coaxial cables 18A and 18B. Communication between LCN 12 and UCN 14 is provided by redundant network interface modules (NIM)s 20, which includes a pair of NIMs, 20A and 20B, with only one of the NIMs, such as NIM 20A providing such function as well as a data translation function at a given period of time. Under such circumstances, NIM-A is designated as the primary and NIM-B 20B which has the same capabilities as NIM 20A, is designated as the secondary NIM since NIM-B is the backup for NIM-A 20A. NIM-A is directly connected to dual redundant cables 16A and 16B by redundant connectors 22A and 22B, and NIM-B is directly connected to cables 16A and 16B by connectors 24A and 24B. NIMs 20, in the preferred embodiment, are connected to redundant cables 18A and 18-B of UCN 14, by drop cables 26A and 26B for NIM-A and drop cables 28A and 28B for NIM-B. The modules of LCN illustrated in Fig. 1 include a history module 30, a universal operator station module 32 and an application module 34. Universal operator station module 32 is the work station for one or more plant operators and provides the interface between the plant operator, or operators, and the process or processes of a plant for which the operators are responsible and which processes they monitor and control through the facilities and information provided by control system 10. For a more detailed description of LCN 12 and of modules 30, 32, and 34 as well as other modules of LCN 12 which are not illustrated, reference is made to the teaching of U.S. Patent 4,607,256. UCN 14 is provided with process manager modules (PM)s 36, 38, 40, and 42. For a more complete description of the the structure and functions of NIMs 20 and PM modules 36, 38, 40, and 42 reference is made to the applications more completely identified in the section of this application entitled Cross-Reference to Related Patent Applications. In the preferred embodiment, PM modules 36, 38, 40, and 42 provide control functions and also function as network interface modules between UCN 14 and input output networks which include input output (IO) modules. The IO modules which are not not illustrated translate analog or digital input data produced by devices such as valves, pressure switches, pressure gauges, thermocouples, and the like into signals compatible to a process module such as PM 36, and translate signals produced by a process modules such as PM 36 to analog or digital output signals compatible to such devices. In the preferred embodiment, both LCN 12 and UCN 14 are token passing local area networks (LAN)s typically with each module having a secondary or backup module available to take over for the primary module of a redundant pair. For example in LCN 12 history module 30, universal station module 32 and application module 34 each would normally be provided with a back up module to provide redundancy. LCN 12 may be provided with additional modules of the same or different types as is well known but which are not illustrated. In UCN 14 process modules 36, 38, 40, and 42 would normally be provided with a back up, or standby, module, but such redundant modules are not illustrated in Fig. 1. The primary function of NIMs 20A and 20B is to provide communications between LCN 12 and UCN 14. The ability of NIMs 20A and 20B, particularly primary NIM-A to communicate with the modules of LCN 12 is a key criteria in determining when primary NIM-A fails over to its secondary NIM-B. The ability of the NIMs 20A and 20B to communicate with LCN 12, particularly with universal station module 32 is important because module 32 provides the operators of the process controlled by process control system 10 with a vantage point, or window, to observe, or monitor the process being controlled and how process control system 10 is functioning. More particularly, module 32 provides the operators with information identifying when and where faults occur in the communication media or modules of any of the networks with which universal station module 32 can communicate. Whenever a fault occurs and wherever it occurs, the responsibility of the operators of the process being controlled by system 10 is to take appropriate steps the find and fix the fault as quickly as possible. Since the communication media of both LCN 12 and UCN 14 are redundant coaxial cables,a fault or faults limited to one of the two cables of either or both networks, will not normally interfere with communications between LCN 12 and UCN 14 because each network has the capability for detecting faults in their redundant communication cables and of switching from the faulty cable ot the redundant, or back up, cable. In the normal operation of plant control system 10 when all the modules and communication cables of both networks are functioning properly, i.e., without any faults and both the primary NIM-A and the secondary NIM-B are both functioning without fault and no faults are present in any of their drop cables 22, 24, 26, 28. Under such circumstances, secondary NIM-B will transmit a status message to primary NIM-A at least once a second over bus 18 of UCN. This status message includes NIM-B's status, i.e. has NIM-B detected that it has suffered a hardware failure or a software failure; has NIM-B received a status message from primary NIM-A within the past one second over communication bus 18 of UCN 14; and whether secondary NIM-B is receiving signals from other modules of UCN 14. The receipt of such signals signifies that NIM-B can communicate with UCN 14 and that therefore UCN 14 is functioning properly as perceived by NIM-B. NIM-A transmits at least once a second to NIM-B a status message which includes the hardware and software status of NIM-A; whether NIM-A has received a status message from NIM-B within the previous second over communication bus 18, and whether NIM-A is receiving messages from and transmitting messages to other modules of LCN 12. Primary NIM-A will transmit a similar status message to NIM-B over the LCN's communication bus 16 except that this message from NIM-A will include information as to whether NIM-A has received a status message from NIM-B within the past one second over communication bus 16 of LCN 12 and the status of UCN 14 as perceived by NIM-A; namely, that NIM-A is communicating with other modules of UCN 14. In addition this status message may include data which NIM-B uses to update its data base so that the data base of NIM-B is substantially the same as that of primary NIM-A. This facilitates NIM-B's being able to assume the functions of NIM-A with a minimum of delay upon a failover. This message sent by NIM-A to NIM-B over bus 16 is sometimes referred to as a redundancy message. NIM-B will transmit a status message to NIM-A over communication bus 16 including NIM-B's status and that of UCN 14 as perceived by NIM-B after receiving a predetermined number of redundancy messages from NIM-A over communication bus 16, such as twenty, or at least once every second. The type of failures, or faults, that can result in NIM-A failing over to NIM-B are: if NIM-A suffers a hardware failure or a software failure; if NIM-B does not receive a status message from NIM-A over buses 16 or 18 of LCN 12 or UCN 14 for 2.5 seconds in the preferred embodiment; if NIM-A is unable to transmit a status message to NIM-B and receive a response from NIM-B over communication bus 16 of LCN 12 within 60 seconds; and NIM-A is unable to communicate with any module of UCN 14 for more than 12 seconds and NIM-B is able to so communicate. NIM-B is deemed to have a failure if it has a hardware or software fault; if NIM-A does not receive at least one status message from NIM-B over either communication bus 16 of LCN 12 or communication bus 18 of UCN 14 during the previous 60 seconds; or if NIM-B does not receive any status messages from NIM-A over bus 16 of LCN 12 for a period of 2.5 seconds but can receive messages from NIM-A over communication bus 18 of UCN 14. Figure 3 is a truth table describing the actions taken by NIMs 20A and 20B upon the occurrence of certain conditions to minimize the consequences of such occurrences upon the operation of process control system 10. Row 1 describes the situation when both LCN 12 and UCN 14 are operating properly and neither primary NIM-A nor secondary NIM-B has a hardware or a software failure that prevents it from operating properly. The situation described in row 2 is one in which primary NIM-A is unable to transmit or receive signals from the communication media 18 of UCN 14. Such a situation can occur if both of its drop cables 26A and 26B have been severed, for example. This occurrence is detected in the following way. NIM-B will transmit to NIM-A over bus 18 of UCN 14 a status message which includes data signifying that NIM-B's status is all right, as is that of LCN 12, and that NIM-B has received a status message from NIM-A over LCN bus 16. Since NIM-A is unable to receive a status message from NIM-B over UCN bus 18 because drop cables 26A and 26B are severed, the failure of NIM-A to receive a status message from NIM-B or to communicate with any other module of UCN 14 for one second results in NIM-A recognizing that it has an UCN failure. NIM-A will transmit a redundancy message to NIM-B over LCN bus 16 at least once a second which message contains data informing NIM-B that NIM-A is isolated from UCN 14. NIM-B will transmit status messages to NIM-A over LCN bus 16 periodically at least once per second. After a 500 msec. delay, NIM-B listens to UCN bus 18 for a message from NIM-A. After five such attempts, NIM-B sends a message to NIM-A over LCN bus 16 commanding NIM-A to terminate operations, and NIM-B takes over the functions of NIM-A. NIM-B will then transmit a message to universal station 32 concerning what has happened so that the operators of the process can take appropriate action to correct the problem, in this case, severed drop cables 26A and 26B. The conditions described in row 3 are similar to those of row 2 except that secondary NIM-B is unable to communicate over UCN bus 18 because its drop cables 28A and 28B are severed, for example, NIM-B will attempt to transmit a status message over UCN bus 18. NIM-A, since it did not receive a status message from NIM-B within the past second, does not send a status message to NIM-B over UCN bus 18. NIM-A will send a redundancy message to NIM-B over LCN bus 16 informing NIM-B that NIM-A did not receive a status message from NIM-B over bus 18 within the allotted time period, one second. NIM-B will then transmit a status message to NIM-A over LCN bus 16 containing data that NIM-B is unable to communicate with any modules of UCN 14. NIM-A after thirty attempts to receive a message from NIM-B over bus 18, NIM-A will send a message to NIM-B over LCN bus 16 for NIM-B to terminate its operations. NIM-B will in the mean time retry five times to send a status message to NIM-A over bus 18. If NIM-B does not receive a message from NIM-A over bus 18 of UCN 14 after five tries, NIM-B will terminate its operations. Thus, NIM-B under these circumstances is terminated by NIM-A or by its own decision. The conditions described in row 4 of Fig.3 arise if the connectors 22A 22B of NIM-A fail. The transmission of status messages between NIM-B and NIM-A is as described above with respect to messages transmitted over UCN bus 18. However, when primary NIM-A attempts to send the usual redundancy message to NIM-B after connectors 22A and 22B fail, NIM-A is unable to do so even though it tries at least once every second. Since the redundancy message normally transmitted by NIM-A to NIM-B over LCN bus 16 is not received by NIM-B, NIM-B after 1.7 seconds have elapsed begins transmitting requests to NIM-A over LCN bus 16 for NIM-A to retransmit its redundancy message over bus 16. This request is repeated three times. If no response to its requests are received by NIM-B after 0.8 seconds after the third request was transmitted, NIM-B will have received a status message from NIM-A over bus 18 of UCN that NIM-A is unable to communicate with any of the modules of LCN 12. NIM-B will then send a message to NIM-A over UCN bus 18 telling NIM-A to terminate operations since it is unable to communicate with LCN 12. Upon the receipt of such a message, NIM-A terminates operation and failover to NIM-B occurs. NIM-B will then notify module 32 of LCN 12 what has occurred. The circumstances described by row 5 of Fig. 3 occur if the drop cables 24-A and 24-B of NIM-B are cut are severed. When NIM-B transmits its status of LCN 12 to NIM-A over UCN bus 18, it will report that it is unable to communicate with any of the modules of LCN 12. NIM-A will transmit its status message once a second to NIM-B over UCN bus 18 to the effect that in so far as NIM-A is concerned, it can communicate with LCN 12 but not with NIM-B. NIM-A will attempt to transmit its redundancy message to NIM-B over LCN bus 16. Since NIM-B can not receive this message, NIM-B will after 1.7 seconds has elapsed, transmit three requests to NIM-A to the redundancy message over LCN bus 16. NIM-B waits for another 0.8 seconds and if NIM-B does not receive the requested message from NIM-A during that period, NIM-B concludes that it can not communicate with modules on LCN 12 Since NIM-B has received a status message from NIM-A that NIM-A can communicate with the modules of LCN 12, NIM-B terminates its operations. NIM-A then notifies universal station module 32 of LCN 12 of the state of affairs. The situation described by row 5, of Fig. 3 can also occur if NIM-B should suffer a transmitter failure which is not detected and therefore is not reported as a hardware failure. Under such circumstances, NIM-B will transmit a routine status message to NIM-A including the status of LCN 12 as perceived by NIM-B at least once a second over bus 18. NIM-A will transmit a routine status message to NIM-B including the status of LCN 12 as perceived by NIM-A over bus bus 18. Primary NIM 20A will send a normal redundancy message to secondary NIM 20B over LCN bus 16. While NIM-B can receive this redundancy message from NIM-A, it cannot transmit an appropriate status message to NIM-A over LCN bus 16. If primary NIM 20A does not receive a proper message from NIM-B over LCN bus 16 for 60 seconds, NIM-A will transmit a message to NIM-B over UCN bus 18 telling NIM-B to terminate its operations. Row 6 describes the action taken by secondary NIM-B if NIM-B is unable to communicate with modules of the LCN. The action taken by NIM-B is to terminate its operation even though NIM-A is unable to communicate properly with modules of UCN 14 and NIM-B can. If both of the NIMs 20A and 20B are unable to communicate with LCN 12, no action is taken, row 7. If primary NIM 20A suffers an LCN failure and secondary NIM 20B an UCN failure, primary NIM 20A fails over to secondary NIM 20B, the situation described in row 8. If both NIM-A and NIM-B have an UCN failure, then no action is taken, row 9. If NIM-B is unable to communicate with modules on either LCN 12 and UCN 14, the situation described in row 10, NIM-B terminates operation. Row 11 describes the situation where NIM-A can communicate only with LCN 12 and NIM-A can not communicate with either the LCN 12 or the UCN 14. Under such circumstances NIM-B terminates its operations. If neither NIM-A nor NIM-B can communicate with with either LCN 12 or UCN 14, then nothing can be done, the situation described by row 12. With respect to the situations described in rows 7, 9 and 12, the most probable cause of both NIMs being unable to communicate with the LCN network, row 7; with the UCN network, row 9; or with both networks, row 12; is that both NIMs have been manually disconnected from the communication cables of the indicated network, or networks. Therefore, the two NIMs wait to be manually reconnected to the communication cables of the LCN, or the UCN, or both, and then resume operations. Row 13 describes the situation that occurs when NIM-A cannot communicate with either LCN 12 or UCN 14 but NIM-B can communicate with LCN 12 but not UCN 14. If this happens, NIM-A will failover to NIM-B. If NIM-A can not communicate with either LCN 12 or UCN 14, but NIM-A can, then NIM-A will failover to NIM-B, row 14. If NIM-A has a hardware or software failure that causes it to crash, then NIM-A will failover to NIM-B, row 15. If NIM-B has a hardware or software failure that causes NIM-B to crash, NIM-A will stop trying to communicate with NIM-B, row 16. If both trunk cables 16A and 16B of LCN 12 are severed between NIM 20A and NIM 20B, both NIM-A and NIM-B can communicate with some of the modules of LCN 12 but not with each other over bus 16. When this occurs, NIM-B will transmit the normal status message including the status of LCN 12 to NIM-A over UCN bus 17 at least once a second. NIM-A will transmit the usual status message including the status of LCN 12 to NIM-B over UCN bus 18 at least once a second. NIM-A will transmit the usual redundancy message including the internal status of NIM-A, the status of UCN 14 as perceived by NIM-A and any update data NIM-A has for NIM-B to NIM-B over LCN bus 16. Since NIM-B is unable to receive this message because of the cable fault in communication cables 16A and 16B, NIM-B after 1.7 seconds has elapsed, transmits three requests to NIM-A over LCN bus 16 requesting NIM-A to re-send the redundancy message over LCN cables 16A and 16B. If NIM-B does not receive a redundancy message from NIM-A within 0.8 seconds after transmitting the third request for NIM-A to do so, and based on status messages from NIM-A received over UCN bus 18, NIM-B determines that NIM-A can communicate with at least some modules of LCN 12. NIM-B then terminates its operation. Row 17 of the truth table of Fig. 3 describes this situation. From the foregoing, it is believed to be obvious that this invention provides an improved method by which redundant network interface modules interconnecting the communication buses of two local area networks can determine when the primary is to fail over to the secondary based on information exchanged between the modules over the media of the two networks.

Claims: A method of operating a system in which redundant first and second network interface modules interconnect the communication buses of first and second local area networks; wherein the first interface module functions as the primary, active, interface module and the second interface module functions as the secondary, backup, interface module, the secondary interface module taking over the functions of said primary interface module on the occurrence of certain predetermined conditions, and wherein said first and second interface modules communicate with each other at regular intervals over said communication buses; the method characterised by: communicating representations of said certain predetermined conditions to cause said secondary interface module to so take over the functions of said primary interface module; each of said interface modules transmitting information to the other of said interface modules over the communication bus of said first network, said information includes the status of said second network as perceived by the transmitting interface module; each of said interface modules transmitting information to the other of said interface modules over the communication bus of said second network, said information includes the status of said first network as perceived by the transmitting interface module; and said primary interface module failing over to said secondary interface module when said primary interface module determines that it is unable to communicate with one of said networks and said secondary interface module has determined that it is able to communicate with said one network. A method according to Claim 1 further comprising the step of said secondary interface module terminating its operation if the secondary interface module is unable to communicate with said first network. A method according to Claim 1 or 2 in which each communication between said interface modules include current operating status of the interface module originating such a communication, and further comprising the step of said secondary interface module terminating its operation if said secondary NIM interface module detects it has suffered a hardware or a software failure. A method according to any preceding Claim further comprising the step of said primary interface module failing over to said secondary interface module if the primary interface module detects it has suffered a hardware or a software failure. A method according to any preceding Claim in which said primary interface module fails over to said secondary interface module without communicating the fact that it has suffered a hardware or a software failure to said secondary interface module. A system in which redundant first and second network interface modules interconnect the communication buses of first and second local area networks; wherein the first interface module functions as the primary, active, interface module and the second interface module functions as the secondary, backup, interface module, the secondary interface module taking over the functions of said primary interface module on the occurrence of certain predetermined conditions, and wherein said first and second interface modules communicate with each other at regular intervals over said communication buses; the system characterised by: means for communicating representations of said certain predetermined conditions to cause said secondary interface module to so take over the functions of said primary interface module; means for each of said interface modules transmitting information to the other of said interface modules over the communication bus of said first network, said information includes the status of said second network as perceived by the transmitting interface module; means for each of said interface modules transmitting information to the other of said interface modules over the communication bus of said second network, said information includes the status of said first network as perceived by the transmitting interface module; and means for said primary interface module failing over to said secondary interface module when said primary interface modules determines that it is unable to communicate with one of said networks and said secondary interface module has determined that it is able to communicate with said one network. A system according to Claim 6 characterised by means for said secondary interface module terminating its operation if said secondary interface module is unable to communicate with said first network. A system according to Claim 5 or 6 characterised in that each communication between said interface modules includes current operating status of the interface module originating such a communication, and by means for said secondary interface module terminating its operation if said secondary interface module detects it has suffered a hardware or a software failure. A system according to any of Claims 6 to 8 characterised by means for the primary interface module failing over to said secondary interface module if said primary interface module detects it has suffered a hardware or a software failure. A system according to any of Claims 6 to 9 characterised by means for said primary interface module failing over to the secondary NIM without communicating the fact that it has suffered a hardware or a software failure to said secondary interface module.

Inventors: DROBISH RENEE, MASSEY W RUSSELL JR, MCLAUGHLIN PAUL F, DROBISH, RENEE, MASSEY, W RUSSELL, JR., MCLAUGHLIN, PAUL F.
Applicants: HONEYWELL INC, HONEYWELL INC.
Application year: 1990
Main classification: G06F11
IPC codes: G06F11, H04L1, H04L29