Siemens Aktiengesellschaft

Siemens Industry Software Nv

Siemens Aktiengesell Schaft

Siemens Industry Software Gmbh

Robert Boschgmbh

Marc Zeller

Kai Höfig

Christof Kaukewitsch

Francesco Montrone

Stefan Rothbauer

Jean-Pascal Schwinn

Marian Marcel Vorderer

Lennart Kilian

Reiner Heilmann

Sebastian Schröck

Chee-Hung Koo

Zhensheng Guo

Andreas Joanni

Thomas Waschulzik

Jan Wieghardt

Bernhard Kempter

Sebastian Klabes

Koo Chee Hung

Ulrich Hipp

Jonathan Menu

Amr Hany Saleh

One or more ring closures of a fault tree are provided. For each one of the one or more ring closures: at least one respective edge the respective ring closure is replaced in the fault tree by a respective variable to obtain a placeholder fault tree and a normalized representation of the placeholder fault tree is determined.

Ring-closures in fault trees and normalized representation

Sensitivity analysis of failure events associated with components of a technical system is provided. It is possible to determine, for a plurality of components of a technical system configured in accordance with at least one initial design, importance values which are indicative of a dependency of at least one non-functional specification of a plurality of non-functional specifications of the technical system configured in accordance with the at least one initial design on a change of the technical system with respect to the components of the plurality of components. The method further includes determining a further design of the technical system based on the at least one initial design, the importance values, and a predefined function describing a joint quality score of the plurality of non-functional specifications for the technical system being configured in accordance with a respective design of the technical system.

Sensitivity analysis-based dependability trade-off analysis

Provided is a computer-implemented method for controlling an operation of a technical system automatically, including at least the steps of: acquiring information about a modified configuration of at least one sub-system included in the technical system; generating a virtual model of the technical system including the at least one sub-system with the modified configuration for an evaluation of the operation; adjusting the virtual model to provide a control instruction for the operation of the technical system, wherein the adjusted virtual model is configured to compare an evaluation value acquired from the evaluation with a target requirement in a cryptographic and to derive the control instruction based on the comparison; and controlling the operation of the technical system based on the control instruction.

Controlling an operation of a technical system automatically

Provided is a device for ensuring safe operation of a technical system configured to generate a smart contract including a condition to be fulfilled for safe operation of a technical system, to store smart contract data of the smart contract in a distributed ledger, and to determine if the technical system fulfills the condition using the smart contract.

Operational safety using a distributed ledger

A computer-implemented method and an apparatus for determining an optimal system configuration out of a plurality of candidate system configurations j is provided. The method includes: receiving data indicating a plurality of candidate system configurations j; determining quantitative dependability metric value for each of the plurality of candidate system configurations j, wherein the quantitative dependability metric value for each of the plurality of candidate system configurations is a dependability property fulfilment value Xfor each list of dependability properties i for each individual candidate system configuration j; and further on b) a dependability property weighting factor Kfor each of the list of dependability properties i for all of the plurality of candidate system configurations j; and determining an optimal system configuration out of the plurality of candidate system configurations j on a quantitative comparison between the quantitative dependability metric value for each of the candidate system configurations j.

Dependability number

A computer-implemented method for determining automatically a machine safety and/or a product quality of a flexible cyber-physical production system with a configuration adaptable during a production process including production steps executed by machines forming equipment of a physical factory of the cyber-physical production system to produce a product according to a product recipe, wherein the machine safety and/or product quality are calculated during runtime of the flexible cyber-physical production system by processing a meta-model of the flexible cyber-physical production system stored in a computer readable storage medium, is provided.

Method and system for determining machine safety and product quality for a flexible cyber-physical production system

A method for transmitting data from a first sub-system to a second sub-system includes the steps of providing a dataset by the first sub-system, the dataset having a data structure identifier and a data value; sending the dataset to the second sub-system; receiving the dataset by the second sub-system; checking whether complete assignment information regarding the data structure assigned to the data structure identifier is present in the second sub-system; recovering any missing assignment information from a communication broker in the event that the second sub-system does not contain complete assignment information; and determining the data structure on the basis of the data structure identifier and the assignment information. A corresponding system, a corresponding first sub-system, a corresponding second sub-system and a communication broker are also proposed.

Data transmission with communication broker

Provided is a method for determining at least one indication of at least one change, having the steps of receiving at least one input data record having the at least one change and associated data, and determining the at least one indication of the at least one change by applying a learning-based approach to the at least one received input data record. The invention is also directed to a determination unit and a computer program product.

Method for determining at least one indication of at least one change

Provided is an application of the described (or similar) decision-theoretic approaches to ensure the quality, output and timeliness of manufactured products for flexible and adaptable production systems, by determining and integrating suitable quality assurance measures which are integrated into the production process in an optimal manner. Thereby, a pareto-optimal sequence of production steps and quality assurance mechanisms are determined that provides an optimal trade-off between target product quality, production time and production costs. Since the approach is performed in an automated way, it can even be performed for flexible production scenarios down to a production of lot size I.

Method and system for manufacturing industrial goods using influence diagram mapped to maximum expected utilities

Provided is a computer-implemented method for generating a Component Fault and Deficiency Tree of a multi-component system the method including:

Computer-implemented method for generating a component fault and deficiency tree of a multi-component system comprising a plurality of components

Various embodiments include modeling a component fault tree for a circuit with an input-side and an output-side component. These include using a fault tree corresponding to a hazard for each respective component, obtaining information about the components of the circuit and a connection between components, and connecting the respective fault trees based on the circuit description. Each fault tree includes an input fault mode or a basic event and an output fault mode. The output fault mode and the input fault mode are each assigned to a component terminal. An output fault mode of the input-side component tree is connected to an input fault mode of the output-side component tree if: there is a connection between the assigned terminal of the input-side component and the output-side component and the output fault mode of the input-side component correlates to an input fault mode of the output-side component.

Method of modeling a component fault tree for an electric circuit

A computer-implemented method and device for resolving closed loops in automatic fault tree analysis of a multi-component system is provided. Also provided is a method for resolving closed loops in automatic fault tree analysis of a multi-component system, the closed loops corresponding, for example, to closed-loop control circuitry of a multi-component device. The closed loops are first identified in a top-down approach within failure propagation paths. Next, the loops are resolved by setting each loop interconnection to Boolean TRUE, adjusting the fault tree in a specific way and finally setting each loop interconnection to Boolean FALSE. Embodiments of the invention are relevant for analyzing safety-critical systems. However, the present concepts are not limited to these applications and may be applied to general use cases where fault tree analysis is applicable. The proposed solution advantageously provides a method that features linear complexity.

Control method and device that resolves closed loops in automatic fault tree analysis of a multi-component system

A method for providing an analytical artifact used for development and/or analysis of an investigated technical system of interest comprised of components having associated machine readable functional descriptions including port definitions and component failure modes processed to generate automatically the analytical artifact in response to at least one applied system evaluation criterion.

System and method for controlling power grid connection of power consumption entity using an analytical artifact

Provided is a method and system for identifying and evaluating common cause failures of system components, wherein at least one analytical artifact and machine readable system related to at least one of spatial, topological data and machine readable system related lifecycle data are processed to analyze automatically a susceptibility of system components to common cause failure based on common cause failure influencing factors.

Method for identifying and evaluating common cause failures of system components

Provided is a method for analyzing and designing a physical system architecture of a safety-critical system, wherein a physical system analysis model representing the physical system architecture of the safety-critical system is modified incrementally until calculated failure rates of failure modes of the physical system analysis model are less or equal to failure rates of corresponding failure modes of a functional system analysis model representing a functional system architecture of the safety-critical system.

Growing community of inventors

Munich, Germany

Marc Zeller