Abb Schweiz Ag

Hitachi Energy Ltd

Hitachi Energy Switzerland Ag

Abb Research Ltd.

Thanikesavan Sivanthi

Thomas R Locher

Yvonne-Anne Pignolet

Theo Widmer

David Kozhaya

Alexandru Moga

Raphael Eidenbenz

Wolfgang Wimmer

Robert Birke

Dacfey Dzung

Gargi Bag

Carsten Franke

Dominique Cachin

Mallikarjun Kande

Hadeli Hadeli

Christian Leeb

Petri Hovila

Otmar Görlitz

Hans-Joerg Maag

Andrea Macauda

Ettore Ferranti

Sandro Schoenborn

Ognjen Vukovic

Johan Palm

Linus Thryborn

Otmar Goerlitz

A method for detecting system problems in a distributed control system including a plurality of computational devices is suggested. The method includes: —deploying one or more software agents on one or more devices of the system; —monitoring, via the one or more software agents, a system configuration and/or a system functionality; —detecting a problem in the monitored system configuration and/or a system functionality; —adding one or more new software agents and deploying the one or more new software agents on one or more devices of the system associated with the problem; —collecting data associated with the problem, via the added software agents.

Method for detecting system problems in a distributed control system and a method for allocating foglets in a fog network

The present invention provides a method for message authentication, in particular in case of low of transmission or storage capacities. The present invention further provides corresponding devices for generating or sending authenticated messages and for receiving or retrieving authenticated messages as well as a system comprising such devices. In an embodiment, the method may comprise (a) preparing a data block having an uncompressed length; (b) compressing the data block so that the data block has a compressed length smaller than the uncompressed length; (c) determining an available length from at least the compressed length and a maximum length of a data frame; (d) calculating a message authentication code, MAC, from at least the data block, having a MAC length not greater than the available length; and (e) creating the data frame, comprising the data block and the MAC.

Method for authenticating messages in resource limited systems

To facilitate storage of data from plural data sources of an industrial automation control system, power distribution system or power generation system, a decision making device executes a machine learning algorithm to determine a compression technique in dependence on the data source from which data originates.

Method and device for facilitating storage of data from an industrial automation control system or power system

To determine system settings for an industrial system, digital twin data of a digital twin of the industrial system is retrieved. System simulations of the industrial system are performed based on the digital twin data to explore candidate system settings for the industrial system prior to application of one of the candidate system settings to the industrial system. At least one optimization objective or at least one constraint used in the system simulations is changed while the system simulations are being performed on an ongoing basis. The results of the system simulations are used to identify one of the candidate system settings for application to the industrial system.

Method and system for determining system settings for an industrial system

To commission an industrial automation control system, IACS, a computing device generates commands to automatically set or verify a security configuration of the IACS. The commands are generated by the computing device based on a machine-readable security baseline, and, optionally, based on a machine-readable configuration file of the IACS.

Method and computing device for commissioning an industrial automation control system

The invention relates to a method and system for detecting and mitigating cabling issues with devices connected in industrial redundant networks. An agent runs on each device and generates information about traffic received at the corresponding device. The agent running on a node generates indicators of traffic received at each port, and error rates for traffic at each port. The agent running on a switch generates information about switch misconfiguration by collecting device identifiers for each port of the switch. The agents send the information to a network manager, which determines switch misconfigurations and wrong cabling from the received information. The network manager also mitigates cabling issues by sending a signal to the affected device(s) or sending a communication to mitigate the issue.

Method and system for detecting and mitigating cabling issues with devices in substation automation systems

A method for automatically improving security of a network system includes: collecting security relevant information from network devices of the network system, the security relevant information including security settings and operational information of the network devices; analyzing the security relevant information for determining weak security settings of a network device, the weak security settings being not necessary for a regular operation of the network system; determining hardened security settings for the network devices based on the weak security settings, the hardened security settings restricting a possible operation of the network device but allow a regular operation of the network system; and applying the hardened security settings to the network device.

Automatic communication network system hardening

A method includes transmitting time-critical messages in an OSI layer 2 network tunnel from a first IED in a first substation to a second IED in a second substation over a WAN, wherein each of the first and second substation comprises an edge IED and is associated with a substation LAN, wherein each of the time-critical messages comprises message parameters. The method includes: creating a translation table comprising corresponding values of the message parameters, between the LANs and the WAN; defining a virtual IED in the second substation using the translated values of the message parameters, to impersonate the first IED; translating the message parameters according to the translation table, by the edge IED of the first and second substation; forwarding the time-critical messages from the first IED in the first substation to the WAN; and receiving the time-critical messages by the second IED in the second substation from the WAN.

Tunnelling time-critical messages between substations over WAN

A device validates reachability of nodes of a communication network of an industrial automation and control system. The device includes a collector module configured to update a data set including discovered dataflow information by detecting direct neighbor nodes having a physical connection to a selected node, and updating the data set by adding the selected node and those direct neighbor nodes which have configured logical network constraints matching logical network constraints of the selected node. The device includes a repeater module configured to repeat the selecting of a direct neighbor node in the data set and directing the collector module to update the data set using the selected direct neighbor node. The device includes a validation module configured to validate reachability of nodes of the network by comparing the data set with a data set including designed dataflow information which defines reachability requirements for nodes of the communication network.

Validating reachability of nodes of a network of an industrial automation and control system

Growing community of inventors

Birmenstorf, Switzerland

Thanikesavan Sivanthi