Siemens Aktiengesellschaft

Harald Herberth

Harald Albrecht

Thomas Talanis

Ronald Lange

Ralf Leins

Roland Eckl

Georg Biehler

Norbert Becker

Dieter Eckardt

Helmut Windl

Dirk Langkafel

Matthias Diezel

Karsten Schneider

Albrecht Donner

Ulrich Kröger

Allan Sobihard

Michael Schlereth

Peter Wagner

Joachim Feld

Rainer Heller

Jürgen Büssert

Horst Walz

Hendrik Gerlach

Peter Wiedenberg

Johann Arnold

Ulrich Welz

Juergen Schmoll

Klaus Meusser

Jürgen Schmoll

Ulrich Braun

Michael Schlemper

Walter Möller-Nehring

Jan Fischer

Wolfgang Bölderl-Ermel

J&uuml;rgen Schmoll

Manfred Krämer

Reiner Plaum

Franz-Josef Menzl

Bodo Stölzle

Manfred Kr&auml;mer

Walter M&ouml;ller-Nehring

George-Chiao-Chi Lo

Klaus Pechmann

Walter Moeller-Nehring

Manfred Kraemer

Stefan List

Andreas Henrich

Franz Köbinger

Richard Fischer

Peter Stühler

Rolf Weidmann

A technical plant, a system for issuing publicly trusted certificates for plant components of the technical plant, an engineering or control system for the technical plant, and a method for issuing publicly trusted certificates for plant components of the technical plant, wherein a) a certification module of a plant component, which is intended to receive a publicly trusted certificate, queries a component identifier; b) the certification module transmits the component identifier together with a certificate request for a publicly trusted certificate to a registration authority; c) the registration authority checks, based on the component identifier, whether the component belonging to the component identifier is assigned to an authorized person or an authorized company; d) if so, the registration authority requests a publicly trusted certificate for the component; and e) the requested publicly trusted certificate is issued and transmitted to the certification module.

Engineering control system, technical installation and method and system for awarding publicly trusted certificates

The invention relates to a method functions within an industrial automation system. In a method for providing functions within an industrial automation system, the functions are made available by a web application of at least one control unit and provided on the client side during execution of a control program via a Single-Page Application (SPA) as a web client at a client-side user interface. The functions are provided by a standardized data model of the web application which represents the at least one control unit and data that can be made available by the control unit. The standardized data model is accessed via a generic data interface of the web application.

Method for providing functions within an industrial automation system, and an automation system

A method and a system for authenticating a surrounding Web application by a Web application that is to be embedded, wherein it becomes possible for the Web application that is to be embedded to identify the surrounding Web application and for the surrounding Web application to authenticate itself, where a high security standard is provided through storage and evaluation of the necessary key material in the respective. Web server because the key material itself is not transmitted, but only authentication messages for the local use of the key material are instead transmitted.

Method and system for authenticating a surrounding web application by a web application that is to be embedded

A method in which a check is performed to determine whether a request originates from a requesting communication device from an IPv6 subnetwork or comprises a destination resource identifier allocated to a Web server component with an IPv6 address or a device name to provide access to device configuration data of an IPv4-based automation device within an industrial automation system in cases of a request for a Web document with device configuration data, wherein if the check result is positive, the Web document is provided with a reference to the device configuration data which includes an Ipv6 address printout or a device name, where in the case of a request for the Web document which originates from a requesting communication device from an IPv4 subnetwork and/or comprises a destination resource identifier with an IPv4 address, the reference to the device configuration data comprises an IPv4 address printout.

Web server component and method for providing access to device configuration data within an industrial automation system

Method of providing functions within an industrial automation system and an industrial automation system thereof. Functions of the automation system are made available by web applications that are combined by the client during control program execution to form interlinked web applications. The functions are provided on a user interface of the client. The web applications are provided by a standard application programming interface that comprises a cross-component application programming interface for initializing and unloading application components and a component-specific application programming interface for event handling and providing component functions. Component instances are linked by an application programming interface for stipulating interactions between application components.

Method for providing functions within an industrial automation system, and industrial automation system

A distributed operation is performed using at least one first and second computer-based object, wherein control information is used to influence or determine a property, a function of the first and/or second computer-based objects. The control information includes details of a parameter identifier, a value associated with the parameter identifier, a range of validity and a remote access attribute. The control information is provided in a retrievable manner, according to the included range of validity, in a memory organized according to ranges of validity and is associated with the first computer-based object. During a function or service call for performing the distributed operation, which is sent from the first computer-based object to the second, the control information is transmitted to the second computer-based object, provided in a retrievable manner in the memory organized according to the ranges of validity and associated with the second computer-based object.

Method for providing control information for a distributed operation in an automation system, computer program and automation system

An access authorization for a computer-based object in an automation system comprising a plurality of network nodes is granted using a control file which is structured in line with a scheme for a markup language for granting access authorizations and which maps a hierarchic tree structure. In this case, access authorizations are mapped in an object model which has a hierarchic tree structure. A relevant subtree from the object model is ascertained for a selected network node, at which services are provided using computer-based objects, or when access to a computer-based object is requested, by an access guideline service. The control file is produced from the ascertained relevant subtree. The control file produced is made available for the selected network node or for access to the computer-based object.

Method for granting an access authorization for a computer-based object in an automation system, computer program and automation system

A help system, an automation device with such a help system and a method for providing help data are disclosed. The help system includes a first offline help facility which is installed as part of an application on a data processing device, the first help facility providing a user with help data based upon context data defined by the user, the help data being stored in the first help facility and thus on the data processing device. A second online help facility is provided which is accessed by the data processing device via the internet such that the context data defined by the user in relation to the first help facility is automatically adopted in the second help facility as context data, the second help facility providing the user with additional help data based on this context data, the help data being stored in the second help facility.

Help system with an online help facility and an offline help facility, an automation device with such a help system and a method for providing help data

The invention relates to a system and a method for the storage and/or retrieval of confidential information for at least one user, by means of which a secret, in particular a project password, can be securely retrieved again. System for the storage and/or retrieval of confidential information for at least one user, particularly within the area of creating a project, with first means for encryption of the confidential information using a public key of an asymmetric method through a key service and for storage of the encrypted information in a generally accessible memory and at least one input device for entry of the private key associated with the public key through the key service for the retrieval of the information, whereby the system includes a selection device for the selection of at least one key service by the at least one user.

System for the storage and retrieval of confidential information

An automation system includes at least one automation object, with a directory for storing object names of the at least one automation object. An object name is assigned a directory entry which includes first information data as a reference to the automation object; second information data as a description of technological functionality; and third information data as a description of interfaces of the automation object. This results in immediate and permanent access to currently created (partial) solutions, so that parallel and/or distributed working on automation objects is possible.

Automation system with automation objects with a directory structure and method for the management of automations objects in a directory structure

An automation system with at least one automation object having a first component for generating a system functionality, a second component for generating a base functionality, and a third component for managing at least one module. Each module has a first module component for generating a system functionality, a second module component for generating a base functionality and a third module component for generating a technological functionality.

Automation system with automation objects consisting of module components

A method for identifying, authenticating and authorizing a user of protected data, in particular a use of protected in an automation system, whereby the user is identified by the user ID input by them in an input field in a login area, this input user ID is combined with a password input by the user and transferred with a one-way encryption function to a system ID which authenticates the user, at least this system ID is transferred in an access identifier from the login area to a protected area and the user is authorized by this transferred access identifier to obtain access to protected data in the protected area.

Method for identifying, authenticating and authorizing a user of protected data

A method for operating automation control equipment applications ensures uninterrupted execution of a control application, at least during specific time periods, but such that the control application does not have the access privileges of a device driver. The operating system is configured for preventing calling of the processor commands from the control application, the processor communicating with the controlled automation equipment via a programmable bus interface. An embodiment of the method comprises the steps of performing read and write access of the control application to the bus interface directly and without routines of the operating system or device driver, and suspending processing of hardware interrupt calls of the processor during a preselected time period. Read and write access of the control application to the bus interface is thus carried out directly, rather than via routines of the operating system, and hardware interrupt calls of the processor are not processed during specific time periods.

Method for operating automation control equipment applications

The embodiment of a respective application-specific call code, necessary in the existing art, as an external control element implemented in a separate component is described. The external control element is usable in any desired containers without thereby modifying the containers themselves or even knowing them at the time the external control element is designed. This may be used in data or information transmission systems, in particular process visualization systems. The components are implemented as software components, in particular as so-called ActiveX controls.

Data visualization with independent data-utilization and data-supplying components

The present invention relates to an automation system with at least one automation module (1), which has at least one automation object (A -An), and with function modules (F F ), which contain means for central management and maintenance of the automation objects (A An). As a result, a manufacturer-independent definition of new automation objects, possibly using already existing automation objects, becomes possible, costly separate programming of new automation solutions is no longer necessary at all or is at least significantly simplified.

Automation system with reusable automation objects and method for reusing automation solutions in engineering tools

Growing community of inventors

Oberasbach, Germany

Harald Herberth