Patent ID: 8522204

Claim:
A method performed using one or more processors for creating a user program for a safety controller which is designed to control an automated installation having a plurality of sensors and a plurality of actuators, wherein the user program comprises a first program portion, in which safety-related program variables are processed in failsafe fashion, and comprises at least one second program portion, in which non-safety-related program variables are processed, wherein failsafe processing is not necessary for the non-safety-related program variables within the second program portion, the method comprising the following steps: defining a number of safety-related program variables, defining a number of non-safety-related program variables, selecting a safety-related program variable from the number of safety-related program variables, selecting a first non-safety-related program variable from the number of non-safety-related program variables, wherein the first non-safety-related program variable is repeatedly assigned an instantaneous value when the user program is executed, defining at least one assignment condition which is processed when the user program is executed, wherein the at least one assignment condition represents a plausibility test used to determine whether the selected first non-safety-related program variable meets a defined reliability requirement which is demanded for safety-related program variables, and defining an association which associates the selected first non-safety-related program variable with the selected safety-related program variable, wherein the instantaneous value of the selected first non-safety-related program variable is assigned to the selected safety-related program variable depending on the assignment condition, when the user program is executed, and wherein the selected first non-safety-related program variable is a program input variable, and the instantaneous value assigned to the program input variable represents a value of a sensor signal generated using a sensor of a non-failsafe design.