Mitsubishi Electric Corporation

Mikiya Yoshida

Kentaro Ishihara

Toshinori Matsui

Madoka Baba

Masuo Ito

Masaaki Takeyasu

Yuta Wada

Makoto Isoda

Daiki Kawakami

Kazuki Yonemochi

Reiya Noguchi

There is provided a control communication system in which when an abnormality occurs in a function provided by a control apparatus, the function where the abnormality has occurred is relocated to another control apparatus so that the continuity of the function is suppressed from being deteriorated. In a control communication system, in the case where an abnormality related to a monitoring subject service is detected, there is selected a relocation control apparatus to which the foregoing monitoring subject service is relocated from a control apparatus where the foregoing monitoring subject service is currently disposed; a software element and execution and communication manifests for the foregoing monitoring subject service are transferred to a service storage device of the relocation control apparatus and are stored therein.

Control communication system

A control apparatus is provided with a recovery control unit that issues an instruction saying that when there exists a process whose starting condition is an execution state of a process in which an abnormality has been detected, all of processes including the process whose starting condition is the execution state of the process in which the abnormality has been detected should temporarily be stopped and saying that after the process in which the abnormality had been detected has restarted, execution of the processes that have temporarily been stopped should be resumed, and a process execution management unit that restarts the process in which the abnormality has been detected and resumes the processes that have temporarily been stopped, in response to the instruction from the recovery control unit.

Control apparatus

An equivalence verification unit () judges through equivalence verification, for each of corresponding combinations which are each a combination of a function included in pre-change source code and a function included in post-change source code, whether the functions included in the corresponding combination are equivalent to each other. A partial verification judgment unit () judges, for each of inequivalent ones of the corresponding combinations, whether the corresponding combination is a partial verification combination including a function where an inequivalent path, in which an inequivalent function is called, and a non-inequivalent path, in which a non-inequivalent function is called, are both included. A partial verification unit () judges, for each of the partial verification combinations, whether the functions included in the partial verification combination are partially equivalent to each other by excluding the inequivalent path and performing the equivalence verification.

Equivalence verification apparatus and computer readable medium

The present invention provides a relay device including: a receiving unit that receives instructions; a fuzzing detection unit that detects an illegitimate instruction among the instructions received by the receiving unit; a disguised operation decision unit that decides a disguised operation corresponding to the illegitimate instruction detected by the fuzzing detection unit; and an instruction generation unit that generates an instruction corresponding to the disguised operation decided by the disguised operation decision unit.

Relay device

A master control device connected to a plurality of slave control devices via a network is configured to include an own local time counted by a counter unit, in a message and transmit the message to the slave control devices by the timing synchronization unit, calculate a difference between a reception time of a message transmitted from the slave control device, which has received the message, at a timing corrected in accordance with the local time and a pre-calculated message reception predicted time by a timing synchronization determination unit, calculate a correction amount for timing of the slave control devices using the difference by a timing synchronization correction unit, add the correction amount to the local time, include the local time in a message, and transmit the message to the slave control devices.

Growing community of inventors

Tokyo, Japan

Mikiya Yoshida