Siemens Aktiengesellschaft

Siemens Enterprise Communications Gmbh & Co. Kg

Faiveley Transport Leipzig Gmbh

Unify Gmbh Co. Kg

Faiveley Transport Leipzig Gmbh & Co. Kg

Kai Fischer

Steffen Fries

Rainer Falk

Markus Heintel

Wolfgang Klasen

Hans Aschauer

Axel Pfau

Angela Schattleitner

Jürgen Gessner

John Elwell

Lutz Boeck

Steffen Poser

Daniela Friedrich

Erik Hoffmann

Daniel Schneider

Christian Peter Feist

Hans-Peter Huth

Johannes Zwanzger

Viktor Ransmayr

Georg Trummer

Klaus-Josef Kunte

Andreas Köpf

Dominik Merli

Amine Mohamed Houyou

Jens-Uwe Buβer

Anton Sebastian Huber

Stefan Pyka

Andreas Furch

Joachim Koppers

Tolga Sel

Franz Sperl

Bernhard Quendt

Lorenz Kästner

Niranjana Papagudi Subrahmanyam

Omar Belhachemi

Katrin Vahldiek

Juergen Gessner

Christoph Thiericke

Sascha Mader

Michael Heisler

Andreas Sauer

Jork Leiterer

Bruno Waterlot

Andreas KÖPF

A climate control system for a vehicle for combustible coolants and is a device for installation on a vehicle roof. A directly evaporating system includes an electrical switch box inside a climate control device for the vehicle and is partitioned so that, in the event of relevant leakages of assemblies containing coolant, the assembly cannot come into contact with the combustible coolant and no ignitable mixture can occur in these areas. The electrical box is a closed assembly and is operatively connected to an assembly by which air from areas outside the segments containing coolant is guided into the electrical box.

Climate control system for a vehicle

An air-conditioning system for a vehicle suitable for flammable refrigerants of categories A2, A2L, and A3 is provided. The system is a compact piece of equipment for installation on a vehicle roof and has equipment sections for air treatment and a compressor-liquefier unit, and optionally an outgoing air, an electrical switchbox, and/or silencer. The system is a direct evaporating system in which the air to be conditioned for a passenger area is sealed off within the air-conditioning system such that, in the event of leaks at refrigerant-conducting assemblies, ingress of flammable refrigerant into the interior of the vehicle is prevented. The refrigerant-conducting assemblies and components are located outside the areas where comfort air is conducted, in a separate housing and open to the surroundings.

Air-conditioning system for a rail vehicle (having air-tight or pressure-tight ducting in the air treatment section)

The invention relates to a method for transferring data in a publish-subscribe system () comprising a key distribution server () and a plurality of communication devices () which can be coupled to the key distribution server () and which comprise at least one server device and a number of client devices. The method comprises the following steps: a) providing (S) a group key by means of the key distribution server () to a group (G) selected from the communication devices () to establish group communications, secured by the group key, within the group (G) of selected communication devices (); b) providing (S) a point-to-point connection which can be encrypted by means of a public key of an asymmetric encryption, between a first and a second communication device () of the group (G); and c) transferring (S) a message encrypted by means of the public key for the point-to-point connection and secured by means of the group key, between the first and the second communication device ().

Method and apparatus for transferring data in a publish-subscribe system

Provided is a method for transmitting data packets over a network from a sender to a receiver via a communication link consisting of at least one transmission section, via which the data packet is transmitted from a sender node to a receiver node, the method having the following steps for at least one transmission section: first security information, which includes information about a cryptographic protective function used in the transmission of the data packet via an adjacent transmission section, is assigned to the data packet by the sender node, the data packet having the assigned security information is transmitted to the receiver node of the transmission section, the security information is checked in the receiver node against a preset guideline, and at least one measure is provided in accordance with the result of the check.

Method for transmitting data packets

Provided is a method for producing a product by a machine tool, wherein the control information and/or production data of a machine tool, such as a milling machine, injection molding machine, welding robot, laser cutter or 3D printer, is protected or cryptographically encrypted such that unauthorized copying or modifying is prevented, including the steps: producing product by the machine tool taking into consideration control information which controls the production of the product; generating production data by the machine tool during production of the product, wherein the production data describes the production of the product; providing protection information to the machine tool, which indicates which of the production data is to be protected, and defines a protection method for the production data which is protected; and protecting that production data which, according to the protection information, is to be protected, by the protection method defined by the protection information.

Method for protecting the production data for producing a product

The invention relates to a communication network having at least one network element (NE), via which data associated with the communication are conducted. The method comprises the following steps: securing, by means of a first cryptographic security function, the data (D) that are transferred from at least one first communication device (PLC) to at least one second communication device (PLC), providing a second cryptographic security function, which secures, between a communication device and a network element, messages that are conducted from the first communication device to the at least second communication device via the at least one network element and that contain the data, providing a checking function by means of the at least one network element, which checking function checks the authenticity and/or integrity of the messages on the basis of the second security function, continuing () or stopping () the communication in accordance with the result of the check () by the checking function, wherein, if the communication is continued, the data remain secured by means of the first security function until the data are received by the at least second communication device.

Securing communication within a communication network using multiple security functions

A method for achieving a security function for a security control device for controlling a device or an installation, including: a) providing at least one first partial secret that is stored in a basic control device, b) providing at least one second partial secret that is stored in a security module, c) combining the at least one first and second partial secret to form an overall secret, required to achieve the security function, within the time period in which the basic control device interacts with the security module via the first and second coupling interfaces, and d) disguising the combined overall secret outside the time period.

Methods and apparatuses for achieving a security function, in particular in the environment of a device and/or installation controller

Provided is a method for achieving a security function for a security control device for controlling a device or an installation, including: a basic control device, and a security module and having the following steps of a) providing at least one first partial secret which is stored in the basic control device, b) providing at least one second partial secret which is stored in the security module, c) combining the at least one first partial secret and the at least one second partial secret in order to achieve the security function, wherein the at least one first partial secret is broken down into sections of a predefinable size and the set of sections is gradually combined with the at least second partial secret by means of a calculation rule, which can be processed within a predefinable period during the execution of the calculation rule according to the size and set.

A method to an associated computer program product, to a production unit, and to an arrangement for examining a consistency between reference data of a production object and data of a digital twin of the production object, wherein two separate communication channels are used.

Examining a consistency between reference data of a production object and data of a digital twin of the production object

A device is provided for detecting time information of different administrative domains. The device includes a plurality of detection units, wherein each detection unit is assigned to one of the administrative domains and is configured to receive time information from a timer of the assigned administrative domains for synchronising with the assigned administrative domains, a storage device having a plurality of storage areas, and a plurality of control units, wherein each control unit is assigned exclusively to one of the detection units and the control units are configured to detect, synchronised with one another, a respective most recent item of the received time information of the respective assigned detection unit and to store the synchronously detected time information of the plurality of detection units together as synchronised data in one of the storage regions.

Device, method and system for detecting and resolving time information of different administrative domains

A modular security control device for controlling an apparatus or an installation includes a basic control apparatus which is configured such that an apparatus or an installation which is at least connectable to the basic control apparatus is at least controllable via a sequence of a control program in the basic control apparatus, and includes a security module which is configured to provide or perform a cryptographic functionality for the basic control apparatus, where the security module is connected to the basic control apparatus by a data connection via a data interface, the basic control apparatus is configured to interact with the security module to achieve a security function of the security control device, and where the basic control apparatus is configured to query an identity and/or authenticity of the security module.

Modular security control device

Provided is a method for the secure, computer-aided execution of program instructions of an application, including the following method steps. The method includes a step of switching on a learning mode of an execution environment. The method includes a further step of performing the application in the execution environment while the learning mode is switched on, wherein program instructions of the application are performed for a selected predetermined application scenario and the execution environment assigns a first application scenario-specific validity information to the performed program instructions. The method includes a step of switching on a working mode of the execution environment, wherein, in the working mode, the execution environment checks the first validity information of the program instructions, and wherein the execution environment executes the program instructions as a function of their validity information.

Method and execution environment for the secure execution of program instructions

Adapting access rules for a data interchange between a first network and a second network by the second network is provided based on a service-specific integrity information item of the first network, wherein the first network processes data for carrying out a service and the service defines multiple components. A respective integrity status is transmitted for each of the components by each respective component via a communication link within the first network to a management unit of the first network. The service-specific integrity information item is computed based on each respective integrity status by the management unit. The service-specific integrity information item is transmitted by a network access point of the first network to a receiver in the second network for adapting the access rules. Access by the receiver to each respective integrity status is prevented.

Adaptation of access rules for a data interchange between a first network and a second network

A method, a first device, and a switching center are described. A first device is authenticated by a switching center inside a network taking into account the use of additional (e.g., virtual) network interfaces. A device uses certificates to transfer additional MAC addresses for authentication. As a result, a device having a plurality of MAC addresses gains access to a network from a plurality of MAC addresses in a one-off authentication process.

Authentication of a first device by a switching center

A network device and a method for operating a network device for an automation network are provided. The network device is set up with the help of a real-time application for providing a function of the network device. The real-time application has at least one predefined, updatable parameter. The network device has a storage device for storing update data for the updatable parameter in an update storage area and storing application data for the real-time application in an application storage area. The network device is set up such that, after update data has been written into the update storage area at a predefined update time, a first memory address referring to the application storage area switches to a second memory address referring to the update storage area in which the update data is stored. The switch takes place deterministically within a predefined update timeslot during runtime of the real-time application.

Network device and method for operating a network device for an automation network

Growing community of inventors

Baldham, Germany

Kai Fischer