Siemens Corporation

Siemens Aktiengesellschaft

Jonathan Kirsch

Stuart Goose

A fault-tolerant replication system includes a first machine running a first hypervisor. A second machine is failure-independent of the first machine. The second machine runs a second hypervisor. A first plurality of virtual machines runs on the first hypervisor. A second plurality of virtual machines runs on the second hypervisor. Each of the virtual machines of the first and second plurality of virtual machines constitutes either a virtual machine replica server of a fault-tolerant replicated state machine or a backup corresponding to a virtual machine replica server of the fault-tolerant replicated state machine. Every backup is embodied on a different machine, of the first and second machines, from its corresponding virtual machine replica server.

Fault-tolerant replication architecture

A system for automatically monitoring and controlling an infrastructure or process includes a plurality of remote clients installed along various portions of an industrial infrastructure or an infrastructure performing a process. Each of the remote clients collects data. A plurality of server replicas is in communication with the plurality of remote clients. The server replicas receive the collected data from the remote clients and process the received data. The plurality of remote clients and the plurality of server replicas communicate across an electronic network. The plurality of server replicas includes a state machine replication system that is tolerant of a failure of one or more of the server replicas.

Byzantine fault-tolerant SCADA system

A network of replicated servers providing a service includes a plurality of server replicas. A leader is elected from among the plurality of server replicas for coordinating ordering of operations among the plurality of server replicas. A view change protocol is executed by the plurality of server replicas after the election of the leader. Each iteration of the view change protocol corresponds to a unique view number. The server replicas are directed by the view change protocol to cooperate to order operations by exchange of information associated with particular view numbers. The information is prioritized in accordance with the view numbers. The non-leaders monitor the response time of the leader and elect a new leader when it is determined that the monitored length of time is greater than a threshold value that is dependent upon current network conditions.

Growing community of inventors

Menlo Park, CA, United States of America

Jonathan Kirsch