Siemens Aktiengesellschaft

Seimens Aktiengesellschaft

Herbert Barthel

Hartmut Schuetz

Horst Daar

Andreas Maximilian Schenk

Maximilian Walter

Heiner Fuchs

Edgar Sigwart

Wolfgang Schmauss

Karl Weber

Thomas Markus Meyer

Günter Steindl

Frank Schiller

Wolfgang Stripf

Enrico Ramm

Reiner Griessbaum

Johannes Hubert

Georg Haller

Hartmut Von Krosigk

Alfons G&ouml;bel

Hartmut Schütz

Ingmar Binder

Rainer Mattes

Temple Luke Fulton

Johannes Birzer

Jürgen Laforsch

Joachim Feld

Mario Maier

Martin Maier

Markus Walter

Karl-Theo Kremer

Ulrich Taschke

Peter Hoedl

Alexander Pfister

Maximillian Walter

Walter Maximilian

Josef Ritzer

Thomas Peter

Klaus Breu

Ralph Luber

Juergen Lechtermann

Rudolf Stromberger

Joerg-Peter Zaech

Armin Trauth

David Ferenczi

Jochen Hohn

Frank Schmid

Richard List

Bernard Mysliwiec

Apparatus and method for functionally securely transfer data in a two-sided data exchange of safety-related data between two communication partners (A, B), wherein a mapping is defined, which assigns to a consumer ID a provider ID of the same end point in the case of each bidirectional connection, and the mapping is made known to the two end points a priori, where the mapping could consist of the one's complement or alternatively of the two's complement, and wherein the connection between the data provider and the data consumer is established as described, the data consumer receives the address identification of the data provider via an additional side channel, for example, and after the connection has been established, the identification of the data provider can be securely checked.

Arrangement and method for functionally safe connection identification

In order to enable a seamless configuration modification during operation, a first automation device sends a second automation device a request for parameter modification. The second automation device responds to the request, such that a standby acknowledgement of the request is sent. Immediately with the transmission of the standby acknowledgement in the second automation device, an output process image is frozen, and the modification of the communication parameters for the second automation device is carried out. The first automation device responds, such that after receiving the standby acknowledgement in the first automation device, the communication is immediately stopped and the modification of the communication parameters is carried out for the first automation device. An input process image is frozen.

Method for modifying a configuration and industrial plant system

A method for functionally secure connection identification during data exchange between two communication subscribers in a communication system, wherein a first subscriber operates as a data provider with a first address identifier and a second subscriber operates as a data requester with a second address identifier, wherein in a request of safety-related data of the first subscriber in a request message, the second subscriber transmits an order number of the data request and its second address identifier and the first subscriber responds with a response message, the second subscriber subsequently checking to determine whether this message contains (i) a second address identifier of the requesting second subscriber, (ii) an order number of the request message of the second subscriber and (iii) the first address identifier of the requested first subscriber, in the event all checking steps are positive, the safety-related data being accepted and otherwise discarded.

Method for functionally secure connection identification

A method for functionally secure connection identification for data exchange via a telegram between a source data service and a sink data service, wherein whether the time stamp of an incoming telegram is older than the time stamp of a predecessor telegram is determined, upon receipt of the predecessor telegram a monitoring counter being started and whether the currently incoming telegram has arrived within a monitoring time is additionally determined, where a local time stamp of a local time basis is compared with the associated time stamp of the incoming telegram and whether a comparison difference does not exceed a period of time is determined, a telegram arriving only being accepted as valid if the time stamp of the arriving telegram is greater than the time stamp of the telegram most recently accepted as valid, and data is valid if the checks are positive, otherwise a fail-safe reaction is triggered.

An automation system includes a fieldbus, at least two automation devices which are securely connected to the fieldbus, at least two coupling points which are configured such that automated connection and disconnection of an exchanging device to and from the fieldbus is possible, wherein exchanging devices are configured to establish a functionally safe connection with the automation devices via the fieldbus, where the functional safety thus achieved serves to avoid malfunctions as a result of errors.

Safety-oriented automation system

A safety-oriented automation system in which additional point-to-point-communications links are installed in addition to the field bus so as to increase functional safety in an automation system.

A method for checking an installation location of a component in a failsafe automation system, wherein the components are connected to one another in series and uniquely defined addresses are continuously assigned from a first component to successor components, wherein, after the assignment of addresses to the components, a switching device is operated in the components such that a signal transit time measurement is performed incrementally with a test signal for each successor component, and wherein the test signal is emitted and re-received and the installation location of the successor component is check based on the time difference.

Method for checking an installation location of a component and automation component

A method for detecting errors in a transfer of data from a transmitter to at least one receiver includes coding the data together with address information identifying the receiver in a series of data packets and transferring the data and the address information using the data packets. The method also includes generating, at the transmitter, a check value for each data packet and transferring the check value with/in the data packet to the receiver. The method further includes comparing, at the receiver, the check value with an expectation value, wherein an error is detected in the event of a deviation. For each data packet to be transmitted, the method includes calculating a number sequence value from the address information using a first calculation rule, generating the check value from the sequence value using a second calculation rule and transmitting the data packet with the check value to the receiver.

Method and system for detecting errors in the transfer of data from a transmitter to at least one receiver

A method for operating a network with two control devices and at least one peripheral device, wherein each of the control devices, in relation to the peripheral device, is in an active operating state in which it is sending control instructions to the peripheral device or is in an idle operating state in which it is not sending any control instructions to the peripheral device. The control device that is in the active operating state in relation to the peripheral device sends synchronization signals at regular intervals to the other control device and activity signals to the peripheral device. Upon failure of the synchronization signals, the non-active control device checks whether the peripheral device is still receiving activity signals from the active control device. If it is not, the non-active control device assumes control of the peripheral device.

Network and method for operating the network

A system and a method are provided for addressing at least two subscribers that are redundant in respect of each other in a communication network. The subscribers are each permanently assigned a unique address which is different for each subscriber. The subscribers form a group such that the subscribers in the group are redundant in respect to each other. The group of subscribers is assigned a unique group address which is only activate for one of the subscribers in the group and de-active for each of the remaining subscribers in the group. At least one higher-order unit is provided for the activation and deactivation.

Addressing of redundant subscribers in a communication network

A method for fail-safe transmission of information between a transmitter and a receiver is disclosed. At least two telegrams relating to the information are transmitted as a first telegram via a first channel and a second telegram via a second channel from the transmitter to the receiver. To identify an error affecting the information during transmission, a first identifier is generated from a first subset of the first telegram being used at the receiver to identify the information contained in the first telegram. This method is used for communication from a safety switching device to a control unit.

Method for fail-safe transmission, safety switching device and control unit

An industrial automation system for controlling the operating means of a technical process. The system includes fail-safe modules for interchanging process data with the operating means, i.e., actuating and measurement signals, stations having slots for modules, which slots are inter-connected by a backplane bus, a central processing unit at least for processing process signals from the technical process, and a field bus for transmitting data between the central processing unit and the stations. In accordance with the invention, the address relationship for the addressing of a fail-safe module by the central processing unit over the field bus for data processing purposes is permanently stored in a first memory in the respective module and is additionally permanently backed-up in the associated station. As a result, it is advantageously possible to safely and automatically recover the address relationships of fail-safe modules due to address relationships which have already been recognized as valid, such as during planning, being backed-up in a permanent, power-failure-safe manner at the station level. In addition, it is possible, when a module is exchanged, for a new module to reload the correct address relationships of the old module, which is no longer present, from the back-up means in the station.

Safety-oriented automation system having automatic address recovery

There is described a communication system for reliable communication between communication stations, wherein there is at least one communication connection between the communication stations, wherein the communication connection features at least two channels for transmitting payload data telegrams, wherein only one channel acts as primary channel for the communication at any time, and wherein the other channels are provided as backup channels. A status indicator in the payload data telegram is provided for the indication of information concerning which channel is primary channel or backup channel at a given time point, wherein the communication stations adopt as primary channel that channel for which, during receipt of the payload data telegrams, the most recent status change from backup channel to primary channel was detected by the communication stations.

High-availability communication system

The invention relates to a system and a method for the securely recording input values used for processing in a safety-oriented processor. In order to allow input values to be recorded securely by means of a non-safety-oriented operating device, a first value which is input via input means is displayed with the aid of an operating device using first display means, said first value is transmitted in an uncoded manner to a safety-oriented process along with an identification value, a second value transmitted by the processor is converted into a third value, said third value is displayed using second display means, a fourth value that is input via the input means is displayed using third display means, said fourth value is converted into a fifth value, said fifth value is transmitted in an uncoded fashion to the processor together with the identification value while the processor stores the first value, control values, and threshold values, compares the identification value to one of the control values by means of first comparing means, compares the first value to the threshold values with the aid of second comparing means, converts the first value into a second value, transmits the second value in an uncoded manner to the operating device, and compares the fifth value to the first value with the aid of third comparing means.

Reliable recording of input values

The invention relates to a system and a method for transmitting telegrams. The system has at least one first communication means provided for sending telegrams and at least one second communication means provided for receiving telegrams, with a telegram having a check value that can be determined from a useful data component of the telegram, with the first communication means having a first telegram counter provided for assigning a count value to a telegram in accordance with a send sequence. To improve error detection during the transmission of telegrams it is proposed that the count value for determining the check value be a constituent of the useful data component is, that information signaling a change in the count value be a constituent of the useful data component when the telegram is transmitted, that the second communication means have a second telegram counter, and that means be provided for synchronizing the first and second telegram counter.

Method and system for transmitting telegrams

Growing community of inventors

Herzogenaurach, Germany

Herbert Barthel