Abb Schweiz Ag

Unify Gmbh Co. Kg

Siemens Enterprise Communications Gmbh & Co. Kg

Thomas Gamer

Michael Bahr

Christian Schwingenschlögl

Sten Gruener

Alexander Gogolev

Soeren Finster

Matthias Roth

Thijmen De Gooijer

Mario Hoernicke

Dirk Schulz

Michael S Wahler

Roland Braun

Johannes Schmitt

Somayeh Malakuti

Andreas Burger

Manuel Oriol

Jeff Harding

Ralf Jeske

Anders Trosten

Florian Kohnhaeuser

Ettore Ferranti

Stephan Sehestedt

Nicolas Coppik

Marius-Petru Stanica

Lars Völker

Jorgen Gade

Stefan Stattelmann

Piotr Powroznik

Zoya Durdik

Florian Kantz

Alexander Schramm

Thijmen De-Gooijer

Michael Wahler

Lars VÖLKER

Christian Lehnert

A computer-implemented method for providing vetting and/or functional validation of software components, comprising: providing a software component and software component data indicating the software component; writing the software component data in a distributed ledger; functional validating and/or vetting the software component and providing functional validation and/or vetting data of the software component; writing the functional validation and/or vetting data in the distributed ledger; providing the data written in the distributed ledger to a software component consumer.

Vetting and/or functional validation of software components

A method for securely supplying data to be used in parameterizing a device for an industrial automation system includes a first party supplying a second party with a machine-readable standardized container for the exchange of device parameters in industrial automation systems, wherein the supplying comprises writing into the container an encrypted primary security credential to be used by the device for establishing trust with the industrial automation system. In another aspect, a method for securely obtaining data to be used in parameterizing a device for an industrial automation system includes obtaining, from a first party, by a second party, a machine-readable standardized container for the exchange of device parameters in industrial automation systems, the container comprising an encrypted primary security credential to be used by the device for establishing trust with the industrial automation system.

Secure provisioning of devices in industrial automation systems

The present disclosure is directed at a façade server. The façade server provides a configurable façade having a configurable address space and serving as an interface for a client and to provide a mapping between the configurable address space of the façade and a data space and/or an address space of an external server.

Façade server

A method for transmitting a first data packet from a receiving input-buffer to a receiving output-buffer, the first data packet in the receiving input-buffer having a non-TSN format and the first data packet in the receiving output-buffer being TSN-compliant, includes the steps of: analysing the first data packet, which has been retrieved from a non-TSN device, in the receiving input-buffer; adding a first data packet time to the first data packet according to a Precision Time Protocol (PTP); adding a predefined first data packet priority level to the first data packet according to a Priority Code Point (PCP) of an 802.1Q tag; transmitting the first data packet to the receiving output-buffer; and sending the first data packet according to the first data packet priority level to a TSN-compliant device.

Interface apparatus between TSN-devices and non-TSN-devices

A system for enabling Time-Sensitive Networking (TSN)-stream configuration of a TSN network includes: a gathering device for gathering resource utilization information from TSN switches of the TSN-stream configuration as gathered resource utilization information; and a tool device for providing a TSN stream path calculation based on the gathered resource utilization information and allocating stream paths and establishing channel multiplexing in the TSN network based on the gathered resource utilization information.

System and method for enabling TSN-stream configuration

A computer-implemented method for semantic-based planning, engineering, and commissioning a project in a building or home automation system, using multiple technologies/protocols of devices including sensors, actuators and control devices, the method being based on a semantic based model having an automatic configuration generation for specific technologies/protocols from a function-based device specification, the method including the following multiple transformation steps: calculating/creating a configuration for a specific protocol/technology using a mapping complex or structure of rules or processing instructions that takes into account the semantic-based model, technology models, heuristics, and/or technology constraints of the devices; generating an internal model of the building automation system with communication objects as an output of the automatic created configuration calculation; transforming the internal model, depending on a targeted technology/protocol, in order to create either application programming interface (API) calls or a format for a mandatory tool, and downloading the created configuration into the building automation devices.

Method for automatic configuration of sematic-based projects in building automation systems

A key distributer node for a network includes a memory device with at least one first key, at least one data communication device that can exchange data with first and second access nodes for a terminal integrated wirelessly into the network, at least one processor connected to the memory device and the data communication device, wherein functions are provided for the processor(s) that allow authentication of the terminal at the second access node in response to a key request received by the second access node, a derivation of a second key from the first key, and triggered transmission of the second key through the data communication device to the second access node. Connections to the network's first and second access nodes with security relationships can be provided for the key distributor node when using the first key.

Methods and devices having a key distributor function for improving the speed and quality of a handover

A method for controlling a physical unit, involving: cyclically generating a plurality of controlling outputs, wherein the plurality of controlling outputs is provided in a redundant manner; applying a selected one of the controlling outputs to the physical unit; checking if at least the selected controlling output is correct; and selecting one of the control units whose controlling output was checked as correct to apply its controlling output to the physical unit () in a subsequent cycle, wherein the applying the selected one of the controlling outputs to the physical unit is performed before or during the step of checking.

Method and apparatus for controlling a physical unit in an automation system

A combination of a component-based automation framework, software-based redundancy patterns, and a distributed, reliable runtime manager, is able to detect host failures and to trigger a reconfiguration of the system at runtime. This combined solution maintains system operation in case a fault occurs and, in addition, automatically restores fault tolerance by using backup contingency plans, and without the need for operator intervention or immediate hardware replacement. A fault-tolerant fault tolerance mechanism is thus provided, which restores the original level of fault tolerance after a failure has occurred&#x2014;automatically and immediately, i.e., without having to wait for a repair or replacement of the faulty entity. In short, the invention delivers increased availability or uptime of a system at reduced costs and complexity for an operator or engineer by adapting automatically to a new environment.

Fault tolerant industrial automation control system

A key distributor node for a network includes a memory device with at least one first key, at least one data communication device that can exchange data with first and second access nodes for a terminal integrated wirelessly into the network, at least one processor connected to the memory device and the data communication device, wherein functions are provided for the processor(s) that allow authentication of the terminal at the second access node in response to a key request received by the second access node, a derivation of a second key from the first key, and triggered transmission of the second key through the data communication device to the second access node. Connections to the network's first and second access nodes with security relationships can be provided for the key distributor node when using the first key.

A method for making safety mechanisms available in wireless mesh networks which have a plurality of nodes that are interconnected by multi-hop communication in a wireless network meshed by mesh routing in the MAC layer, every node being active as a router to forward the data traffic of the other nodes. At least two differentiated levels of confidence are defined by a type of protection (ToP) the value of which represents a specific level of confidence for the nodes and data packets, the data packets being labeled with a ToP value in the mesh header, and at least one ToP value being allocated to the participating nodes, the nodes forwarding the data packet in the mesh network using the ToP values of the node and of the data packet if this ToP value combination is admissible in the node.

Method for making security mechanisms available in wireless mesh networks

Growing community of inventors

Oftersheim, Germany

Thomas Gamer