Siemens Mobility Gmbh

Siemens Aktiengesellschaft

Matthias Seifert

Rainer Falk

Steffen Fries

Martin Wimmer

Frank Aust

Gerhard Weller

Norbert Grass

Klaus Ruiner

Theodor Rosch

Christian Bauer

Tiago Gasiba

Erich Niedermayr

Frank Renpenning

Peter Ziegler

Andreas Kister

Philip Fosu Okyere

Georg Meszaros

Carsten Sattler

Patrik Schoenenberger

Hans-Georg Völk

Oliver Schulz

Thomas Wenzel

Jörn Giesecke

A computing system has with a computing device. The computing system has an input data path, which unidirectionally connects an interface device of the computing system to the computing device, and an output data diode, which unidirectionally connects the computing device to at least one output interface of the computing system. The input data path has a series circuit which is arranged downstream of the interface device and contains an input data diode and a data lock. The input data diode allows a transmission of data in the direction of the computing device and prevents the transmission of data in the opposite direction. The data lock has a first and a second terminal and a temporary storage unit for temporarily storing data and is configured such that the temporary storage unit can be selectively connected solely to the first or second terminal but not simultaneously to both terminals.

Computing system and method for operating a computing system

A method for operating a railway system. Cryptographic data which includes at least one key and/or at least one digital certificate is stored in a storage device of a vehicle of the railway system. The vehicle transmits the cryptographic data to at least one track-side device of the railway system when the vehicle is in communication range of the least one track-side device as part of the train travel. There is also described a corresponding rail vehicle of a railway system.

Method for operating a railway system, and vehicle of a railway system

A computing system has a computing device. The computing system has an input data path, which unidirectionally connects an interface device to the computing device, and an output data diode, which unidirectionally connects the computing device to the interface device. The input data path has a data lock which is connected to the interface device by a first terminal and to the computing device by a second terminal. The data lock has a storage unit for storing data and is configured such that the storage unit can be selectively connected solely to the first or second terminal but not to both terminals simultaneously. The computing device accepts data from the interface device solely if the data is transmitted to the computing device from the interface device via the input data path within a transmission session initiated by the computing device using the output data diode.

A method and a device for a reaction-free and integrity-protected synchronization of log data between at least one first network and a second network is provided. The log data is copied by means of a monitoring device upon being transmitted from devices to a first log server in the first network. Metadata of the log data is additionally generated in a first managing unit, the metadata including time information, integrity information, origin information, and/or completeness information. The copied log data and the corresponding metadata are transmitted to the second network via a unidirectional coupling unit in a reaction-free manner. The lot data is checked and ordered chronologically in the second network using the metadata. Thus, a synchronized copy of the log data from the first network is promptly provided in the second network.

Method and apparatus for reaction-free and integrity-protected synchronization of log data

Provided is a computer-implemented method and a transmission apparatus for transmitting data between a first network and a second network having high and low security requirements, wherein a first session is set up between the first and second networks, a first data packet is transmitted from a transmitting unit in the first network via a first one-way communication unit to a receiving unit in the second network, and a second session is set up and a second data packet is transmitted from a transmitting unit in the second network via a second one-way communication unit to a validation unit, the second data packet is validated in the validation unit on a prescribed rule, positive validation of the second data packet results in a third session being set up, and the second data packet is transmitted from the validation unit to a receiving unit in the first network.

Method and transmission apparatus for transmitting data between two networks

A method and a system for fault-correcting transfer of a dataset from a first network into a second network via a unidirectional communication unit, the receiving apparatus having a limited computing and main memory capacity is provided. The dataset is divided into partial datasets and are each coded by adding at least one correction mark. The marks and correction marks are decoded repeatedly in the second network, wherein marks and correction marks associated with a first encoded partial dataset are stored in a main memory, marks and correction marks associated with other encoded partial datasets are buffered in a background memory, and the first coded partial dataset is decoded, and then the previously received marks and/or correction marks of one of the other coded partial datasets are shifted from the background memory into the main memory. The dataset is reproduced from the decoded partial datasets in the second network.

Method and system for the error-correcting transmission of a data record via a unidirectional communication unit

A method for supplying power to railway operating elements that are arranged along a railway line. A terminal station has a power supply device. At least one substation has a power supply subunit for at least one connected railway operating element. An input-side control unit of the substation modifies the current consumption in the substation incrementally, with corresponding modification of the voltage of the power supply subunit to match the rated voltage of the railway operating element on the substation, and producing a coded message. The control device of the terminal station modifies the output voltage according to the coded message, until the rated voltage for the railway operating element is reached on the power supply subunit. When the nominal voltage is reached the power supply subunit is connected to the railway operating element.

Method for power supply and power supply for railway operating elements arranged on a railway line

A device for unidirectional transmission of data from first to second networks includes a network TAP reading data from a first subscriber of the first network to the first network and outputting read data to a second subscriber of the second network. A testing device for freedom from errors of read data includes a processor testing the read data for freedom from errors and a first digital output for a digital signal. The processor actuates the first digital output depending on the test of the read data such that the digital output outputs a first digital signal depending on the result of the test of the read data to form a feedback channel to the first subscriber by the output first digital signal to indicate the result of the test of the read data to the first subscriber. A corresponding method, network system and computer program are also provided.

Device and method for the unidirectional transmission of data

A method and transmission apparatus for direct and feedback-free transmission of log messages from at least one first network into a second network is provided. Log messages are transmitted individually and directly. The log messages in the first network are monitored by a monitoring device and transmitted into the second network via a one-way data transmission unit. The transmission is thus carried out feedback-free and with integrity protected. Additionally, a log server having a line loop is provided. Local messages are transmitted via the line loop and filtered, monitored by a monitoring device and transmitted directly to a second log server in the second network via the one-way data transmission unit Thus, efficient transmission of log messages into a second network for real-time analysis is achieved.

Method and apparatus for immediate and reaction-free transmission of log messages

An assembly checks at least one firewall device and a method protects at least one data receiver. In the method, permissible and non-permissible data traffic is differentiated in data traffic in the direction of the data receiver using specific rules. Non-permissible data traffic is blocked, and permissible data traffic is allowed through. In order to check the function of the firewall device, the data traffic which has been allowed through is interrupted if the data traffic which has been allowed through has non-permissible data traffic.

Assembly for checking at least one firewall device, and method for protecting at least one data receiver

A method manages keys in a manipulation-proof manner for a virtual private network. The method includes authenticating a communication terminal on an authentication server by use of a first key over a public network and providing a communication key, which is suitable for the communication over a virtual private network in the public network, for the authenticated communication terminal over the public network. The communication key in the communication terminal is encrypted by a second key, which is provided by a manipulation-protected monitoring device.

Method for managing keys in a manipulation-proof manner

A data transmission system contains a transmitting and/or receiving unit on a track side and a transmitting and/or receiving unit on a vehicle side. Accordingly, the transmitting and/or receiving unit on the vehicle side contains at least one transmitting and/or receiving element on the vehicle side which is mounted in the region of a track vehicle door. The unit is covered by the track vehicle door and separated from the rail track when the track vehicle door is closed and remains uncovered by the same when the track vehicle door is open.

Data transmission system

A method and system for providing a customer with a service upon a service request. The method includes retrieving a dataset from a database for identifying a qualified service person using information about the service, the service person and a customer; establishing communication with the customer; and providing the customer with the service. After the service is performed, the retrieved dataset is updated to maintain accurate information stored in the database.

Method and system for providing a service

The present invention provides an efficient and simple method and system for providing a customer with a service on demand. The invention is based on providing a plurality of interconnected technical devices with remote access. During operation of a technical installation including the technical devices, operating data are acquired, encrypted and stored in a operation database. Upon an explicit service request by the customer, at least one of the technical devices sets up a remote connection to a service center, preferably by using a smart card including Public Key Infrastructure (PKI) data for validating the smart card, where the remote connection is verified and the encrypted data stored in the operation database are read out and decrypted. Based on the decrypted data&#x2014;which represent a current status of the technical installation&#x2014;, a service activity is efficiently performed at the technical installation, either remotely or locally.

Growing community of inventors

Buchholz, Germany

Matthias Seifert