International Business Machines Corporation

Abb Schweiz Ag

Abb Research Ltd.

Michael S Wahler

Jochen M Kuester

Jana Koehler

Sebastian Obermeier

Thomas R Locher

Manuel Oriol

Jussi H Vanhatalo

Ksenia Ryndina

Sascha Stoeter

Thomas Gschwind

Mallikarjun Kande

Thomas Gamer

Roman Schlegel

Senthil Kumar Sundaram

Olaf W Zimmermann

Rainer F Hauser

Hadeli Hadeli

Ettore Ferranti

Sunderam Sankaran

Nelly Schuster

Thijmen De Gooijer

Ognjen Vukovic

Maelle Kabir-Querrec

Sanjeev Koul

Ana Hristova

Olaf W Zimmerman

Andrei Dan

Georgia Giannopoulou

Der-Yeuan Yu

Sanjay Gosh

Techniques for configuring data protection settings for data of an industrial system or an electric power system are provided. The industrial system or the electric power system includes at least one gateway via which the data are transmitted to a computing resource for processing and/or storing. One or several privacy-preserving techniques to be applied to the data are automatically determined. The one or several privacy-preserving techniques being determined based on data privacy requirements for the data and processing operations to be performed on the data by the computing resource. The determined one or several privacy-preserving techniques are automatically applied.

Method and system for enhancing data privacy of an industrial system or electric power system

A programmable logic controller for an industrial control system is disclosed which includes an application logic execution layer and at least one of an update checking layer and an output checking layer. The application logic layer is configured for processing sensor input data to generate an output parameter for an actuator. The output checking layer is configured for outputting only an allowed output parameter to the actuator. The update checking layer is configured for verifying whether application logic update defined by application logic update data corresponds to an application logic update in a list of allowed logic updates, and the application logic is updated only if the update data is allowed application logic update data.

Operating a programmable logic controller

A method and system for automatic signalling an alert when a possible intrusion occurs in an industrial automation and control system, based on security events which occur in the industrial automation and control system or are externally fed into the system. The method includes the steps of: (a) determining a correlation of a first and second security event and storing the correlation in an event database, wherein the correlation includes a probability that the first security event is followed by the second security event within a normalized time period, (b) identifying a candidate event as the first security event, based on event information of the candidate event, upon occurrence of the candidate event, (c) classifying the candidate event as anomalous when the probability exceeds a predetermined threshold and no second security event follows the candidate event within the normalized time period, and (d) signalling the alert indicating the candidate event.

Method for intrusion detection in industrial automation and control system

A combination of a component-based automation framework, software-based redundancy patterns, and a distributed, reliable runtime manager, is able to detect host failures and to trigger a reconfiguration of the system at runtime. This combined solution maintains system operation in case a fault occurs and, in addition, automatically restores fault tolerance by using backup contingency plans, and without the need for operator intervention or immediate hardware replacement. A fault-tolerant fault tolerance mechanism is thus provided, which restores the original level of fault tolerance after a failure has occurred&#x2014;automatically and immediately, i.e., without having to wait for a repair or replacement of the faulty entity. In short, the invention delivers increased availability or uptime of a system at reduced costs and complexity for an operator or engineer by adapting automatically to a new environment.

Fault tolerant industrial automation control system

A relay interface module that is commutatively connectable to at least one I/O device and a controller, wherein the relay interface module is configured to provide data from the I/O device to at least one controller in a distributed control system (DCS) via a communication interface. An application related to a particular I/O device may then be executed freely on any controller present in a DCS without losing real time connection with the associated I/O device. Data can be transferred from an I/O device to an associated application executed on a controller such that the real time connection between the I/O device and the application being executed is maintained.

Relay interface module for a distributed control system

A controller module, method, and a non-transitory computer program product are disclosed for the dynamic configuration of an industrial control system, which can include a current settings receiver configured to receive current configuration and security settings of the industrial control system, a changed settings receiver configured to receive changed configuration settings of the industrial control system, a settings analyzer configured to determine, based on the current configuration and security settings and the changed configuration settings, updated configuration and security settings of the industrial control system, and a dynamic activator configured to dynamically establish at least one communication path in order to activate updated configuration and security settings of the industrial control system.

Dynamic configuration of an industrial control system

A method of generating code from a class model for a modeled system. The class model specifies a plurality of elements of a modeling language and dependencies between elements of a plurality of elements. In operations the method analyzes the class model to identify a first possible source of under-specification with respect to the modeled system in the class model by using pattern recognition to find an occurrence of a first problem pattern of a plurality of problem patterns in the class model, the plurality of problem patterns are then stored in a repository. The method also includes identifying a set of constraint patterns where the at least first constraint pattern is linked in the repository to the first problem pattern. A user may then select a constraint pattern which is utilized in instantiating constraints and generating code based on the class model and the instantiated constraints.

Generating constraints in a class model

A method of automatic pattern based editing of business models on a canvas of business model editing application includes receiving a request to automatically edit a business model, constructing an initial current set C of elements from the business model, constructing an initial next set N of elements from the business model, and connecting elements between the initial current set C and the initial next set N until all elements in both the initial current set C and the initial next set N have been connected. The connecting is based on at least connecting elements sequentially if the elements exist from left to right on the canvas, and connecting elements in parallel or using a decision and merge combination if the elements exist from top to bottom on the canvas.

Method of automatic pattern based editing of business models

A method of organizing received decision instances based on reference architecture, including determining a respective particular project phase attribute for each of the decision instances, classifying the decision instances, determining a respective scope attribute for each of the decision instances, categorizing the decision instances in accordance with each of the respective scope attributes thereof, for all decision instances with the same categorization and with the same classification, ordering the corresponding decision instances by model elements, modeling directed links between apparently dependent decision instances, analyzing the dependent decision instances to confirm that the decision instances satisfy the apparent dependencies represented by the directed links and producing an error message if a result of the analysis is negative, and generating a real-time updateable and/or modifiable to-do list interface.

Method of organizing software design decision instances

Techniques for composition of model transformations from a predetermined set of model transformations. A state machine is provided in memory. The states are defined in the state machine in terms of predetermined model attributes. In response to specification of a target state for an input model to be transformed, an execution sequence in the state machine, between a start state corresponding to the input model and an end state corresponding to the specified target state, is selected. Each transformation in the selected sequence is then successively executed on the input model. After executing each transformation in the selected sequence, the transformed input model state is compared to the model state defined in the state machine to determine if the selected sequence is inoperable for the input model. If so, an alternative execution sequence in the state machine, between the input model state and the specified target state, is selected.

Automatic composition of model transformations

A method for modeling business transformation includes steps of: constructing a first analysis model based on at least one legacy-business-process-model; and analyzing the first analysis model in conjunction with at least one business-process-reference-model. The method further includes deriving a second analysis model in response to analyzing the first analysis model in conjunction with the at least one business-process-reference-model and refining the second analysis model to obtain a design model.

Method for modeling business transformation

Growing community of inventors

Zurich, Switzerland

Michael S Wahler