Siemens Aktiengesellschaft

Peter Kob

George Lo

Ronald Lange

Rolf Schrey

Armin Zeltner

Markus Höfele

Livio Dalloro

Thomas Gruenewald

Gustavo Arturo Quiros Araya

Andreas Scholz

Christian Winkler

Gunther Birk

Ren-Yi Lo

Ulrich Braun

Mina Azib

Hermann Friedrich

Frank Roelofs

Patrick Eisen

Andras Varro

Maximilian Hoch

Thomas Kohl

Martin Ketzer

Oliver Narr

System and method for granting access rights to control applications of an industrial automation system, wherein first control applications are initially provided via software containers that are loaded into a container runtime environment installed on a host operating system, and executed there, the first control applications are monitored and configured via an application management system, additionally the first control applications are authenticated via the application management system, second control applications are executed and cryptographically authenticated directly on a host operating system, and data traffic from the first and second control applications to target devices and/or applications are each authorized after successful authentication via an at least temporarily valid access key inserted into the data traffic.

Method and system for granting access rights to control applications of an industrial automation system

A method for operating a cooling system of a transformer, wherein the transformer is cooled via a cooling liquid that circulates in the cooling system that includes a heat-exchanger, devices for increasing heat exchange performance of the at heat-exchanger and a controller, where in a normal operating state, the controller adjusts power of the devices for increasing the heat exchange performance as a function of a measured upper temperature and where, irrespective of the measured upper temperature, the controller refrains from activating the devices and/or operates the devices at a reduced power relative to the normal operating state if the lower temperature of the cooling liquid lies below a lower threshold value during operation of the transformer to achieve improved characteristics of the cooling system during operation under low environmental temperatures of the transformer, particularly in the case of a turn-on operation following lengthy storage in a cold state.

Method and test environment for providing an application for a computer controlled component

Arrangement and method for securely executing an automation program in a cloud computing environment, wherein the automation program is installed on computer hardware in a public IT infrastructure, and wherein the computer hardware is connected via a data connection to a cloud server, where the connection and a dedicated runtime environment of the computer hardware are configured such that the automation program is transferrable onto the computer hardware and its execution can be monitored via the server and data connection, such that the automation program and sensitive information, i.e., recipes, instructions and/or method steps, contained therein can be executed in a protected environment, effective protection against interception is achieved and such that the dedicated hardware can be matched to a possibly pre-existing automation program so that existing automation programs can execute in the cloud or be made available without modification and further system tests, certifications and other costly adaptation steps.

Arrangement and method for secure execution of an automation program in a cloud computing environment

Automated skill matching is provided in industrial control. The interfaces () and/or the production processes () of the controller () and machine () are matched. The matching of the interfaces () links parameters except for optional parameters to check for incompatibility. The matching of the production processes () uses a cross-product of the process () of the machine () with the process () of the controller () to check for incompatibility. The skill checking guides manual confirmation of compatibility, reducing downtime and reducing engineering or programming time. The machine () is more likely to operate correctly with the controller () due to the automated skill matching.

Skill matching for control of an industrial production machine

A method and edge device for controlling data exchange of an industrial edge device with an industrial automation arrangement and a data cloud, wherein the edge device includes a first communication connection to the industrial automation arrangement and a second communication connection to a network of the data cloud, where the edge device includes applications exchanging data, and where the edge device includes a control device to control the data to be exchanged, wherein whether data exchange of an application is controlled via the first communication connection and the data exchange is implemented directly via the second communication connection or vice versa is defined for each application, where a data flow control device ensures simultaneous direct data exchange by an application via both communication connections does not occur, such that rigorous checking of applications or containers within the applications with respect to data security is not required.

Method and arrangement for control data exchange of an industrial edge device

A method and a system for providing security information about an application container for an Industrial Edge device, wherein the application container displays an application, runtime libraries and parts of an execution environment, where first information is obtained from the application or source code, second information is obtained from the application program or source code of the application, where confidentiality classes and processing classes are ascertained, and where the security information is formed by linking arising confidentiality classes to arising processing classes and the security information is associated with the application container such that specific and reliable security information about the application container or applications is generated and the security information is provided to a user or an installation system via association of the security information with the application container or the application to make information about the specific security problems or properties available before an application is used.

Method and system for providing security information about an application container for an industrial edge device

A control layer automation device comprises a processor, one or more control layer applications, a database, a wireless interface, a device memory. Each control layer application is configured to perform a discrete set of automation functions. The database comprises a plurality of operator device identifiers and the wireless interface allows the one or more control layer applications to communicate with a plurality of operator devices via the plurality of operator device identifiers. The device memory comprises the one or more control layer applications. The control layer application manager is configured to manage execution of the one or more control layer applications on the processor.

Provisioning of control layer applications for use in industrial control environments

In an industrial automation system comprising a plurality of industrial control devices connected to an industrial communication network, control and/or supervision functions of the industrial automation system are provided by services implemented by computer-based objects in industrial control devices. A computer-based object is assigned a first qualifier enabling the computer-based object to be accessed and/or modified during configuration of the respective service and/or a second qualifier enabling the computer-based object to be accessed and/or modified during runtime of the respective service. Upon a request for access to a computer-based object by a service consumer, the service consumer's operational state is determined. Depending on a set first and/or second qualifier of a computer-based object and depending on a determined operational state of a service consumer, access to the computer-based object is granted to the service consumer.

Method of providing data access in an industrial automation system, computer program product and industrial automation system

Growing community of inventors

Heroldsberg, Germany

Peter Kob