Siemens Mobility Gmbh

Siemens Aktiengesellschaft

Stefan Gerken

Johannes Riedl

Hans-Peter Huth

Jens Braband

Uwe Eckelmann-Wendt

Bernhard Evers

Andreas Schallenberg

Matthias Bolz

Markus Seemann

Fernando Meya Delfa

Jose Luis Garcia Cano

Faustino Frechilla Daza

Michael Hofer

Sonja Steffens

Ralf Pinger

A method for performing a technical process in which application programs are executed redundantly in a plurality N of computing instances and, on the basis of an MooN system, wherein M is at least two and N is at least three, a comparison of the plurality N of results of the redundant execution of the application programs is performed in a voting. When a minority of the results is different from a majority of the results with identical content, the minority is excluded during the performance of the technical process, is repaired with a state copy of one of the intact computing instances and reintegrated into the process. There is also described a computer program product and a provisioning apparatus.

Method for performing a technical process in regular operation and repair operation

A method executes a technical process by executing application programs redundantly in a redundancy group containing a plurality N of computing entities and thereby calculate a plurality N of redundant results. A comparison of the messages containing the results is performed. When a majority of the messages contain identical results the majority of messages is used for further execution of the technical process. Processing units are formed from a plurality of computing entities being combined in each of the processing units, wherein none of these processing units contains a plurality of computing entities from the same redundancy group. The generated redundant messages are compared to determine if the messages are to be sent as external messages to computing entities, which do not belong to the processing units. No comparison is carried out for messages that are exchanged as internal messages between computing entities within a processing unit.

Method for the computer-aided execution of a technical process in processing units, computing environment, and storage medium

In a method for computer-assisted operation of a memory unit, data is saved in the memory unit and the data is encoded before saving, or data is retrieved from the memory unit and the data is decoded after retrieval. For first-time encoding of the data, at least one group of application data sets, containing data segments having identical application data for an application program and check data segments having different diversity characteristic data respectively, is generated or selected from a supply of possible diversity characteristic data. Each application data set is encoded and saved. The data is retrieved in that the application data sets are retrieved and decoded. Data is saved in that the application data sets are encoded and saved. Furthermore, a method for computer-assisted, repeated execution of an application program in redundant computing instances, a computer program product and a provision apparatus are disclosed.

Method for computer-assisted operation of a memory unit and execution of application programs having redundant data storage

A method performs a computer-assisted creation of a test algorithm for processing applications in a computing environment for executing a large number of application programs, by taking into account configuration data for the application programs. For each application program, a data segment is formed and the configuration data referring to the relevant application program is combined as a data segment. The data segments are combined in a data set. A global ID code is assigned to the data set. Participating components of the computing environment are identified, and an ID code assigned to them. A hash function is applied to each of the data segments contained in the data set. A calculation function is applied to each data segment in that the ID codes, the hash value of the relevant data segment and the global ID code are linked together by computational operators.

Method and computing environment for creating and applying a test algorithm for computational processes

A railway automation network includes a publish/subscribe system with at least one transmitter-end application, at least one transmitter-end message broker, at least one receiver-end message broker and at least one receiver-end application. The at least one transmitter-end message broker is configured to map a message published by the transmitter-end application or one of the transmitter-end applications onto at least two redundant, at least partially physically independent network paths of the railway automation network on the basis of a subject specified in the message. The railway automation network is configured to transmit the message to the receiver-end message broker or at least one of the receiver-end message brokers simultaneously over the at least two network paths. The receiver-end message broker is configured to transmit the message to the at least one receiver-end application. A method for transmitting messages in a railway automation network is also provided.

Railway automation network and method for transmitting messages in a railway automation network

In a method for computer-assisted operation of a memory unit, encoded data is saved in the memory unit. The data is retrieved and decoded after retrieval. The memory unit is monitored for errors in that a temporal sequence of computer-assisted checking operations is carried out for the memory unit. For first-time encoding of the data, each required application data set is generated or selected, containing check data segments. For each application data set, the check data segment is occupied by count data, which characterizes the checking operation being implemented. After retrieving and decoding the application data sets, an error is determined when the count data characterizes neither the checking operation being implemented nor the most recent completely implemented checking operation. The check data segment of the relevant application data set is occupied by count data, which characterizes the checking operation being implemented, if no error was determined.

Method for computer-assisted operation of a memory unit and execution of application programs with memory checking for memory errors

An arrangement for redundant data processing has an integrated circuit in which the functionality of a multi-core processor is implemented. Processor cores () of the multi-core processor are each designed to execute a useful program. The results which emerge from the execution of the useful program by the different processor cores are compared by a comparison module of the arrangement. The processor cores differ from one another with respect to an address or data structure (AS, AS; DS, DS) which is used by a processor core to respectively store and read data in or from a memory area () that is assigned to the particular processor core. In terms of hardware, the individual processor cores are at least partially implemented separately in the integrated circuit.

Method and apparatus for redundant data processing in which there is no checking for determining whether respective transformations are linked to a correct processor core

A system, in particular for controlling signal towers in rail traffic, includes at least a plurality of redundant replicants for generating redundant control signals. A voter structure having a plurality of majority voters is also provided. Each majority voter has a respective output and inputs that are connected to the outputs of the plurality of redundant replicants. The voter structure and the plurality of redundant replicants are separated from one another in terms of hardware, the outputs of the plurality of majority voters are connected to the inputs of a discriminator voter and the output of the discriminator voter provides a control signal, in particular for controlling signal towers. The discriminator voter only emits a control signal when the inputs thereof are not at variance.

System, in particular for controlling signal towers in rail traffic

A method exchanges messages with different security classes between security-relevant devices. Key pairs containing a private key and a public key corresponding to the private key are assigned to each security class, wherein the keys and key pairs of each security class differ from each other. Each security-relevant device has all the public keys for decrypting messages for each security class and the relevant private keys for encrypting messages corresponding to a security class that is lower than or equal to the security class of the security-relevant device. Upon receipt, the security class for the message is identified by decryption by use of the public key.

Method for exchanging messages between security-relevant devices

In a method for voting using concatenated signatures, a plurality M of replicants for generating M redundant messages, where M&#x2265;2, and a plurality N of voter modules, where N&#x2265;2, are provided. Each voter module has a voter for voting the redundant messages and a crypto unit with a private key fragment for signing a message. The redundant messages of the replicants are transmitted to each voter module, so that the voter of each voter module generates a voted message on the basis of the redundant messages. N private key fragments are used to generate signatures for the voted messages that are checked by a public key of a reception unit. In the event of a successful check, the repeatedly voted message is accepted.

Growing community of inventors

Braunschweig, Germany

Stefan Gerken