Abstract: An assembly checks at least one firewall device and a method protects at least one data receiver. In the method, permissible and non-permissible data traffic is differentiated in data traffic in the direction of the data receiver using specific rules. Non-permissible data traffic is blocked, and permissible data traffic is allowed through. In order to check the function of the firewall device, the data traffic which has been allowed through is interrupted if the data traffic which has been allowed through has non-permissible data traffic.

Abstract: A method for operating a railway system. Cryptographic data which includes at least one key and/or at least one digital certificate is stored in a storage device of a vehicle of the railway system. The vehicle transmits the cryptographic data to at least one track-side device of the railway system when the vehicle is in communication range of the least one track-side device as part of the train travel. There is also described a corresponding rail vehicle of a railway system.

Abstract: A capacitive multipath force sensor module includes a movable actuator, first and second stationary capacitor plates, and a central capacitor plate connected to the actuator and positioned between the stationary plates. The central plate moves by a same amount toward one stationary plate and away from the other stationary plate when the actuator is moved. In multiple successive cycles, while the first stationary plate is held at ground, (i) the central plate and the second stationary plate are connected to a voltage and (ii) are then disconnected from the voltage with the central plate being connected to a capacitor having a known capacitance value to thereby enable a charge quantity stored on the central plate to be transferred to the capacitor. After a predefined number of cycles, a voltage of the capacitor, which is indicative of an amount of movement of the actuator, is measured.

Abstract: A method and transmission apparatus for direct and feedback-free transmission of log messages from at least one first network into a second network is provided. Log messages are transmitted individually and directly. The log messages in the first network are monitored by a monitoring device and transmitted into the second network via a one-way data transmission unit. The transmission is thus carried out feedback-free and with integrity protected. Additionally, a log server having a line loop is provided. Local messages are transmitted via the line loop and filtered, monitored by a monitoring device and transmitted directly to a second log server in the second network via the one-way data transmission unit Thus, efficient transmission of log messages into a second network for real-time analysis is achieved.

Abstract: Provided is a computer-implemented method and a transmission apparatus for transmitting data between a first network and a second network having high and low security requirements, wherein a first session is set up between the first and second networks, a first data packet is transmitted from a transmitting unit in the first network via a first one-way communication unit to a receiving unit in the second network, and a second session is set up and a second data packet is transmitted from a transmitting unit in the second network via a second one-way communication unit to a validation unit, the second data packet is validated in the validation unit on a prescribed rule, positive validation of the second data packet results in a third session being set up, and the second data packet is transmitted from the validation unit to a receiving unit in the first network.

Abstract: A device for unidirectional transmission of data from first to second networks includes a network TAP reading data from a first subscriber of the first network to the first network and outputting read data to a second subscriber of the second network. A testing device for freedom from errors of read data includes a processor testing the read data for freedom from errors and a first digital output for a digital signal. The processor actuates the first digital output depending on the test of the read data such that the digital output outputs a first digital signal depending on the result of the test of the read data to form a feedback channel to the first subscriber by the output first digital signal to indicate the result of the test of the read data to the first subscriber. A corresponding method, network system and computer program are also provided.

Abstract: A device for monitoring network traffic arriving at a signal box of a railway operating system over a communication network includes a network TAP for reading the network traffic arriving at the signal box over the communication network and outputting the read arriving network traffic to a processor in order to check the read arriving network traffic. A network separating device separates the signal box from the communication network. The processor is configured to actuate the network separating device on the basis of the result of the check of the read arriving network traffic in such a way that the network separating device separates the signal box from the communication network. A corresponding method and a computer program product are also provided.

Abstract: A method for supplying power to railway operating elements that are arranged along a railway line. A terminal station has a power supply device. At least one substation has a power supply subunit for at least one connected railway operating element. An input-side control unit of the substation modifies the current consumption in the substation incrementally, with corresponding modification of the voltage of the power supply subunit to match the rated voltage of the railway operating element on the substation, and producing a coded message. The control device of the terminal station modifies the output voltage according to the coded message, until the rated voltage for the railway operating element is reached on the power supply subunit. When the nominal voltage is reached the power supply subunit is connected to the railway operating element.

Abstract: An assembly checks at least one firewall device and a method protects at least one data receiver. In the method, permissible and non-permissible data traffic is differentiated in data traffic in the direction of the data receiver using specific rules. Non-permissible data traffic is blocked, and permissible data traffic is allowed through. In order to check the function of the firewall device, the data traffic which has been allowed through is interrupted if the data traffic which has been allowed through has non-permissible data traffic.

Abstract: A method manages keys in a manipulation-proof manner for a virtual private network. The method includes authenticating a communication terminal on an authentication server by use of a first key over a public network and providing a communication key, which is suitable for the communication over a virtual private network in the public network, for the authenticated communication terminal over the public network. The communication key in the communication terminal is encrypted by a second key, which is provided by a manipulation-protected monitoring device.

Abstract: A data transmission system contains a transmitting and/or receiving unit on a track side and a transmitting and/or receiving unit on a vehicle side. Accordingly, the transmitting and/or receiving unit on the vehicle side contains at least one transmitting and/or receiving element on the vehicle side which is mounted in the region of a track vehicle door. The unit is covered by the track vehicle door and separated from the rail track when the track vehicle door is closed and remains uncovered by the same when the track vehicle door is open.

Abstract: Device and method for producing a unidirectional (UD) layer from a predetermined number of filament strands. Device includes a dispenser arrangement structured and arranged for delivering the predetermined number of filament strands, and a storage arrangement, structured and arranged for temporary storage of the predetermined number of filament strands. The storage arrangement includes separate storage parts for each of the predetermined number of filament strands. Device also includes a spreading arrangement and an outlet.

Abstract: A method manages keys in a manipulation-proof manner for a virtual private network. The method includes authenticating a communication terminal on an authentication server by use of a first key over a public network and providing a communication key, which is suitable for the communication over a virtual private network in the public network, for the authenticated communication terminal over the public network. The communication key in the communication terminal is encrypted by a second key, which is provided by a manipulation-protected monitoring device.

Abstract: An active antenna device, a network device, an access point equipped with the network device and a plurality of distributed active antenna devices form components of a communication system. The active antenna device contains an antenna unit, an amplifier unit and a control unit, wherein the amplification of the amplifier unit is controlled by the control unit according to an instruction from a management unit located in the network device. The devices achieve a low handover frequency whereas rendering the communication less vulnerable to contentions and/or interference than in the conventional systems.

Abstract: Device and method for producing a unidirectional (UD) layer from a predetermined number of filament strands. Device includes a dispenser arrangement structured and arranged for delivering the predetermined number of filament strands, and a storage arrangement, structured and arranged for temporary storage of the predetermined number of filament strands. The storage arrangement includes separate storage parts for each of the predetermined number of filament strands. Device also includes a spreading arrangement and an outlet.

Abstract: A data transmission system contains a transmitting and/or receiving unit on a track side and a transmitting and/or receiving unit on a vehicle side. Accordingly, the transmitting and/or receiving unit on the vehicle side contains at least one transmitting and/or receiving element on the vehicle side which is mounted in the region of a track vehicle door. The unit is covered by the track vehicle door and separated from the rail track when the track vehicle door is closed and remains uncovered by the same when the track vehicle door is open.

Abstract: A method and system for providing a customer with a service upon a service request. The method includes retrieving a dataset from a database for identifying a qualified service person using information about the service, the service person and a customer; establishing communication with the customer; and providing the customer with the service. After the service is performed, the retrieved dataset is updated to maintain accurate information stored in the database.

Abstract: The present invention provides an efficient and simple method and system for providing a customer with a service on demand. The invention is based on providing a plurality of interconnected technical devices with remote access. During operation of a technical installation including the technical devices, operating data are acquired, encrypted and stored in a operation database. Upon an explicit service request by the customer, at least one of the technical devices sets up a remote connection to a service center, preferably by using a smart card including Public Key Infrastructure (PKI) data for validating the smart card, where the remote connection is verified and the encrypted data stored in the operation database are read out and decrypted. Based on the decrypted data—which represent a current status of the technical installation—, a service activity is efficiently performed at the technical installation, either remotely or locally.

Abstract: The present invention provides an efficient and simple method and system for providing a customer with a service on demand. The invention is based on providing a plurality of interconnected technical devices with remote access. During operation of a technical installation including the technical devices, operating data are acquired, encrypted and stored in a operation database. Upon an explicit service request by the customer, at least one of the technical devices sets up a remote connection to a service center, preferably by using a smart card including Public Key Infrastructure (PKI) data for validating the smart card, where the remote connection is verified and the encrypted data stored in the operation database are read out and decrypted. Based on the decrypted data—which represent a current status of the technical installation—, a service activity is efficiently performed at the technical installation, either remotely or locally.

Abstract: The present invention provides an efficient and simple method and system for providing a customer with a service upon a service request. The invention is based on retrieving a dataset from a database for identifying a qualified service person using information about the service, the service person and the customer, establishing communication with the customer and providing the customer with the service. After that, the retrieved dataset is updated to provide for accurate information stored in the database.