Siemens Mobility Gmbh

Uwe Eckelmann-Wendt

Stefan Gerken

Andreas Schallenberg

Matthias Bolz

Johannes Riedl

Hans-Peter Huth

Jose Luis Garcia Cano

Faustino Frechilla Daza

Fernando Meya Delfa

Carsten Hellwig

Ralf Pinger

A method for performing a technical process in which application programs are executed redundantly in a plurality N of computing instances and, on the basis of an MooN system, wherein M is at least two and N is at least three, a comparison of the plurality N of results of the redundant execution of the application programs is performed in a voting. When a minority of the results is different from a majority of the results with identical content, the minority is excluded during the performance of the technical process, is repaired with a state copy of one of the intact computing instances and reintegrated into the process. There is also described a computer program product and a provisioning apparatus.

Method for performing a technical process in regular operation and repair operation

A method performs a computer-assisted creation of a test algorithm for processing applications in a computing environment for executing a large number of application programs, by taking into account configuration data for the application programs. For each application program, a data segment is formed and the configuration data referring to the relevant application program is combined as a data segment. The data segments are combined in a data set. A global ID code is assigned to the data set. Participating components of the computing environment are identified, and an ID code assigned to them. A hash function is applied to each of the data segments contained in the data set. A calculation function is applied to each data segment in that the ID codes, the hash value of the relevant data segment and the global ID code are linked together by computational operators.

Method and computing environment for creating and applying a test algorithm for computational processes

A railway automation network includes a publish/subscribe system with at least one transmitter-end application, at least one transmitter-end message broker, at least one receiver-end message broker and at least one receiver-end application. The at least one transmitter-end message broker is configured to map a message published by the transmitter-end application or one of the transmitter-end applications onto at least two redundant, at least partially physically independent network paths of the railway automation network on the basis of a subject specified in the message. The railway automation network is configured to transmit the message to the receiver-end message broker or at least one of the receiver-end message brokers simultaneously over the at least two network paths. The receiver-end message broker is configured to transmit the message to the at least one receiver-end application. A method for transmitting messages in a railway automation network is also provided.

Railway automation network and method for transmitting messages in a railway automation network

An arrangement for redundant data processing has an integrated circuit in which the functionality of a multi-core processor is implemented. Processor cores () of the multi-core processor are each designed to execute a useful program. The results which emerge from the execution of the useful program by the different processor cores are compared by a comparison module of the arrangement. The processor cores differ from one another with respect to an address or data structure (AS, AS; DS, DS) which is used by a processor core to respectively store and read data in or from a memory area () that is assigned to the particular processor core. In terms of hardware, the individual processor cores are at least partially implemented separately in the integrated circuit.

Method and apparatus for redundant data processing in which there is no checking for determining whether respective transformations are linked to a correct processor core

A method synchronizes the operation of a plurality of multicore processors. A first and a second multicore processor each have a main processor core and at least one secondary processor core that is used for executing utility programs. Only the main processor cores of the various multicore processors synchronize to one another. The at least one secondary processor core is controlled by the respective main processor core in each multicore processor. The utility programs are processed by the at least one secondary processor core and outputs are generated that are made available to the respective main processor core of the same multicore processor. Outputs from the multiplicity of multicore processors are then output in sync by the respective main processor core.

Method for synchronized operation of multicore processors

A system, in particular for controlling signal towers in rail traffic, includes at least a plurality of redundant replicants for generating redundant control signals. A voter structure having a plurality of majority voters is also provided. Each majority voter has a respective output and inputs that are connected to the outputs of the plurality of redundant replicants. The voter structure and the plurality of redundant replicants are separated from one another in terms of hardware, the outputs of the plurality of majority voters are connected to the inputs of a discriminator voter and the output of the discriminator voter provides a control signal, in particular for controlling signal towers. The discriminator voter only emits a control signal when the inputs thereof are not at variance.

System, in particular for controlling signal towers in rail traffic

A method exchanges messages with different security classes between security-relevant devices. Key pairs containing a private key and a public key corresponding to the private key are assigned to each security class, wherein the keys and key pairs of each security class differ from each other. Each security-relevant device has all the public keys for decrypting messages for each security class and the relevant private keys for encrypting messages corresponding to a security class that is lower than or equal to the security class of the security-relevant device. Upon receipt, the security class for the message is identified by decryption by use of the public key.

Method for exchanging messages between security-relevant devices

In a method for voting using concatenated signatures, a plurality M of replicants for generating M redundant messages, where M&#x2265;2, and a plurality N of voter modules, where N&#x2265;2, are provided. Each voter module has a voter for voting the redundant messages and a crypto unit with a private key fragment for signing a message. The redundant messages of the replicants are transmitted to each voter module, so that the voter of each voter module generates a voted message on the basis of the redundant messages. N private key fragments are used to generate signatures for the voted messages that are checked by a public key of a reception unit. In the event of a successful check, the repeatedly voted message is accepted.

Growing community of inventors

Wolfenbuettel, Germany

Uwe Eckelmann-Wendt