Siemens Aktiengesellschaft

Stefan Rothbauer

Kai Höfig

Marc Zeller

Harald Karl

Marian Marcel Vorderer

Roland Porsch

Joachim Fröhlich

Chee-Hung Koo

Sebastian Schröck

Ludger Fiege

Reiner Heilmann

Ariane Sutor

Martin Rothfelder

Daniel Ratiu

Tudor Ionescu

Manfred Lohner

Efthimios Liakos

Michael Zanzinger

Hartmut Zeilmann

Koo Chee Hung

Markus Hollfelder

Klaus Döbeling

Provided is a device for ensuring safe operation of a technical system configured to generate a smart contract including a condition to be fulfilled for safe operation of a technical system, to store smart contract data of the smart contract in a distributed ledger, and to determine if the technical system fulfills the condition using the smart contract.

Operational safety using a distributed ledger

A computer-implemented method for determining automatically a machine safety and/or a product quality of a flexible cyber-physical production system with a configuration adaptable during a production process including production steps executed by machines forming equipment of a physical factory of the cyber-physical production system to produce a product according to a product recipe, wherein the machine safety and/or product quality are calculated during runtime of the flexible cyber-physical production system by processing a meta-model of the flexible cyber-physical production system stored in a computer readable storage medium, is provided.

Method and system for determining machine safety and product quality for a flexible cyber-physical production system

A method for transmitting data from a first sub-system to a second sub-system includes the steps of providing a dataset by the first sub-system, the dataset having a data structure identifier and a data value; sending the dataset to the second sub-system; receiving the dataset by the second sub-system; checking whether complete assignment information regarding the data structure assigned to the data structure identifier is present in the second sub-system; recovering any missing assignment information from a communication broker in the event that the second sub-system does not contain complete assignment information; and determining the data structure on the basis of the data structure identifier and the assignment information. A corresponding system, a corresponding first sub-system, a corresponding second sub-system and a communication broker are also proposed.

Data transmission with communication broker

Conducting automatically a process failure mode and effect analysis, PFMEA, for a factory adapted to produce a product in a production process using a meta model, MM, stored or loaded in a data storage. The stored meta model, MM, comprises abstract factory model elements modeling an abstract factory, AF, including one or more service declarations modeling abstract services across different factories, wherein each service declaration comprises failure mode declarations for different failure modes.

Method and system for automatic conduction of a process failure mode and effect analysis for a factory

Provided is a method for dynamic adaption of a workflow, WF, of an automation system, AS, wherein the workflow, WF, includes automated handling functions, AHFs, implementing associated production steps of a production process controlled by a workflow processor, WP, of a machine of the automation system and at least one automated handling function, AHF, shell configured to plug a pluggable automated handling function, pAHF, into the workflow, WF, of the automation system during runtime of the automation system for adaption of the workflow, WF.

Method for dynamic adaptation of a workflow of an automatic system

A method for memory modification resulting in a test probe for examining a program under test substantially during run-time is provided. The ability to inject faults or errors in order to test a reaction of the program to a fault in a particular state and to individually replace access to a regular operand by accessing a shadow operand allow for non-intrusive tests while the program is substantially executed in real-time. The program itself is not substantially altered for testing purposes.

Method for executing a program in a computer

At least one embodiment of the present invention relates to supporting a safety-oriented system, with the safety-oriented system including safety-critical software components and non-safety-critical software components. In this method, a possibility of a safety-critical software component and a non-safety-critical software component influencing each other is identified and a set of technical measures for preventing the possibility of influencing is defined. In this way, an absence of feedback from non-safety-critical software components to safety-critical software components is both verified and also ensured by at least one embodiment of the present invention.

Method for supporting a safety-oriented system

A method and system for transmitting a message in real time between users in a closed network of a vehicle (), in particular a rail-mounted vehicle, are provided, wherein safety-relevant real-time data (D) of a message (N), including a transmitter ID of a transmitter () within the closed network, is encrypted (S) using a private key (K) of the transmitter () in order to generate an encrypted message (N'); the encrypted message (N&#x2032;), together with the unencrypted transmitter ID of the transmitter (), is transmitted (S) from the transmitter () to a receiver () within the closed network via a vehicle bus (), and the encrypted message (N&#x2032;) is decrypted by the receiver () using a public key (K) of the transmitter () identified by the received, unencrypted transmitter ID in order to retrieve the unencrypted message (N). The received transmitter ID is compared with the transmitter ID contained in the retrieved message (N) in order to determine whether the message (N) has been transmitted correctly.

Method and device for transmitting messages in real time

IN a method and a device for determining a probability of occurrence that an overall system fulfills a predefined system performance, the overall system is composed of instances of different classes of partial systems, and each class of partial systems has an associated class fault tree. The method has the following steps: (a) calculating (S) an overall performance for each failure combination of the number of non-failed instances within a class; (b) automatic selection (S) of failure combinations, the calculated overall performance of which fulfills the predefined system performance; (c) automatic generation (S) of an overall fault tree based on the class fault trees of partial systems as a function of the selected failure combinations; and (d) evaluating (S) of the generated overall fault tree for calculating the probability of occurrence of a fulfillment of the predefined system performance by the overall system.

Growing community of inventors

Allershausen, Germany

Stefan Rothbauer