Siemens Aktiengesellschaft

Siemes Aktiengesellschaft

Jan-Gregor Fischer

Michael Pirker

Steffen Lamparter

Michal Skubacz

Silvio Becher

Dagmar Beyer

Joachim Bamberger

Thomas Hubauer

Michael Metzger

Gunther Birk

Maja Milicic Brandt

Josep Soler Garrido

Clemens Hoffmann

Michael Watzke

Michael Leipold

Tamás Márton Klein

A system for analyzing and controlling network traffic associated with at least one device that resides between a first network and a second network includes a processor that is operatively coupled to a memory and configured to execute a policy definition authority component and a network traffic analyze-control-component. The policy definition authority component is configured to provide, to the network traffic analyze-control-component, a first data analytics model and a second data analytics model. The network traffic analyze-control-component is configured to receive an input data representative of the network traffic, apply first data analytics model to the input data. The first data analytics model identifies a network traffic situation, applies the second data analytics model to the network traffic situation. The second data analytics model generates a rule according to which the network traffic can be controlled, and controlling the network traffic according to the at least one rule.

Systems and methods for analyzing and controlling network traffic

A method for transmitting software artifacts from a source network to a target network is disclosed. Each target and source network is assigned to a proxy system comprising a plug-in. The transmission is monitored on the target network side. A target network-internal information structure is provided containing entries, each of which characterizes a software artifact that can be downloaded when authorization is granted by an operator of the target network by the plug-in. The entries are read from the target network-internal information structure. Requests from the target network relating to the availability of new software artifacts are received on behalf of the source network. For each request, at least one entry which matches the request is searched in the target network-internal information structure. Based on the at least one matching entry being present in the target network-internal information structure, either the software artifact is retrieved or the request is blocked.

Method and system for transmitting software artifacts from a source network to a target network

A method for controlling access to at least one computer program which is accessible and executable on an embedded system is disclosed. The embedded system is provided and comprises two different runtime modes, a first runtime mode and a second runtime mode. In the first runtime mode, a predefined set of IT-security constraints is associated with the at least one computer program. In the second runtime mode at least a part of the predefined set of the IT-security constraints associated with the at least one computer program is void and the at least one computer program is accessible and executable with elevated rights for performing software development operations on the at least one computer program. The embedded system is set into the second runtime mode for a predefined time period. After the predefined time period is expired, the embedded system is set into the first runtime mode.

Methods and systems for controlling access to at least one computer program

A device for coupling a machine, in particular a machine tool, having a number N of data sources for providing data of the machine in data source-specific file formats having a plurality of applications is provided. The device includes a transformation unit, which is designed to transform data of one of the N data sources present in one of the data source-specific data formats to data of a generic semantic data model for at least one of the applications and data of one of the applications present in the generic semantic data model to data of one of the data source-specific data formats for one of the N data sources. The transformation unit thus advantageously establishes data interoperability between the respective application and the respective data source of the machine. Also provided is a method and to a computer program product for coupling a machine to a plurality of applications.

Device and method for coupling a machine to a plurality of applications

Provided is a deployment platform for deployment of an industrial application on an edge computing device, ECD, connected to the controller of a machine tool, MT, the deployment platform including a model management component, MMC, adapted to instantiate a generic machine tool model, GMTM, stored in a memory to provide a machine instance model, MIM, of the respective machine tool, MT, on the basis of a machine tool data report, MTDR, received by the model management component, MMC, from the edge computing device, ECD, of the respective machine tool, MT, and further adapted to convert generic data requirements, gR, of a generic industrial application into machine tool specific requirements, mtsR, using the machine instance model, MIM, of the respective machine tool, MT, wherein an instantiated industrial application for the machine tool, MT, is provided by instantiating the generic industrial application by extending its configuration data with machine tool specific requirements.

Method and platform for deployment of an industrial application on an edge computing device of a machine tool

A system device and a method for managing access to data in an automation environment are disclosed. The data is associated with assets in an automation environment, where the data includes one of restricted data and unrestricted data. The automation environment is accessible via one or more computing platforms including a plurality of computing resources that are classifiable into a trusted computing platform and a non-trusted computing platform. The method includes classifying analytics operations performable on the data into a first operation set that is executable on the trusted computing platform. The analytics operations are associated with one or more applications executable on at least one of the computing platforms. The method includes enabling access to at least one of the unrestricted data and a first unrestricted output of the first operation set outside the trusted computing platform by a communication operation.

System device and method for managing access to data in an automation environment

A system for providing a generic query interface for industrial systems of different customers includes an interface configured to input customer queries of customer industrial systems. The system also includes a query processing unit that is configured to automatically perform a query decomposition of the input customer query into query parts based on a query reformulation model stored in a database of the system. For each decomposed query part, it is determined whether the decomposed query part is available in an application semantic model stored in the database of the system. Query parts not available in the application semantic model are automatically reformulated based on the query reformulation model, and a query recomposition of the query parts available in the application semantic model and the reformulated semantic query parts is automatically performed to generate a generic query applied to an application logic of the system to provide a query result.

Method and system for providing a generic query interface

Provided is a process optimizer apparatus for optimizing dynamically an industrial production process of a production plant including physical production modules, the process optimizer including a watchdog component adapted to monitor the production modules of the production plant to detect configuration changes within the production plant; a model comparator component adapted to evaluate a production plant data model of the production plant including digital twin data models related to physical production modules of the production plant to identify automatically deviating model elements of digital twin data models related to physical production modules of the production plant affected by the configuration changes detected by the watchdog component; and a process resequencer component adapted to perform a dynamic process optimization of the at least one production process of the production plant depending on the deviating model elements identified by the model comparator component.

Method and apparatus for optimizing dynamically industrial production processes

An Internet of Things, IoT, structure including application layers with a 3D Adaption Matrix, a server for an IoT structure, a device for an IoT application and a method for manipulating dependencies between the application layers is provided. The 3D Adaption Matrix includes adaption rules, which adaption rules are specified once and which adaption rules enable specifying dependencies between the application layers. A module of the IoT structure is configured to employ the adaption rules for an IoT application.

Internet of things structure with a 3D adaption matrix

A method for manufacturing a product according to a production plan includes a plurality of production steps. The method includes providing a plurality of production modules, for each production step of the plurality of production steps, independently executing a negotiation process for selecting a production module, and disposing the selected production modules, each selected for performing one of the production steps, for performing the plurality of production steps. The negotiation process includes designating production modules that are capable of performing the production step, assigning module parameters to the designated production modules, calculating a cost for each of the designated production modules based on the module parameters of the respective production module, and selecting one of the designated production modules as a function of the calculated cost.

Method for manufacturing a product according to a production plan

A novel power allocation method, as early as in the procurement of electricity, takes account of network congestion and simultaneously enables logical and physical separation of network control and power allocation. An allocation component and a network monitoring component separately from one another detect tasks relating to the allocation of power and via predetermined interfaces exchange information or intermediate states relating to the allocation before the allocation is actually implemented for power control. This enables adaptive power control of power sources and consumer units and the flexible implementation of a plurality of requirements of a modern power distribution network.

Power control method, device and system for instigating a power control based on the examined allocation

An apparatus for processing data in a computer-aided logic system includes at least one reasoning device having a reasoner, which draws conclusions on the basis of a semantic model and a model instance of the semantic model using data, at least one data source for providing data for processing by the reasoning device, and at least one application which makes a request to the reasoning device and receives results of conclusions from the reasoning device. The reasoning device and the data source interact such that the reasoning device takes an event which has occurred in the data source, particularly at particular times, as a basis for receiving associated event-based data from the data source for the purpose of drawing a causal and/or temporal-based conclusion. The information about the event-based data from the data source includes a temporal and a causal component. There are also described a related method and implementation.

Growing community of inventors

Zorneding, Germany

Jan-Gregor Fischer