Abstract: Conducting automatically a process failure mode and effect analysis, PFMEA, for a factory adapted to produce a product in a production process using a meta model, MM, stored or loaded in a data storage. The stored meta model, MM, comprises abstract factory model elements modeling an abstract factory, AF, including one or more service declarations modeling abstract services across different factories, wherein each service declaration comprises failure mode declarations for different failure modes.

Abstract: One or more example embodiments provides a method for speech control of a medical apparatus, a corresponding speech control apparatus, a medical system comprising the speech control apparatus, a computer program product and a computer-readable storage medium.

Abstract: One or more example embodiments provides a method for speech control of a medical apparatus, the method comprising capturing an audio signal containing operator speech input directed at controlling the apparatus; first analyzing the audio signal for a first speech analysis result; recognizing a first speech command based on the first speech analysis result; assigning the first speech command to a safety class, the safety class being provided for safety-critical speech commands; ascertaining a verification signal to confirm the first speech command; generating a control signal for controlling the medical apparatus, the generating being based on the first speech command and the verification signal, wherein the control signal is for controlling the medical apparatus according to the first speech command; and inputting the control signal into the medical apparatus.

Abstract: A method for transmitting data from a first sub-system to a second sub-system includes the steps of: providing a dataset by the first sub-system, the dataset having a data structure identifier and a data value; sending the dataset to the second sub-system; receiving the dataset by the second sub-system; checking whether complete assignment information regarding the data structure assigned to the data structure identifier is present in the second sub-system; recovering any missing assignment information from a communication broker in the event that the second sub-system does not contain complete assignment information; and determining the data structure on the basis of the data structure identifier and the assignment information. A corresponding system, a corresponding first sub-system, a corresponding second sub-system and a communication broker are also proposed.

Abstract: One or more ring closures of a fault tree are provided. For each one of the one or more ring closures: at least one respective edge the respective ring closure is replaced in the fault tree by a respective variable to obtain a placeholder fault tree and a normalized representation of the placeholder fault tree is determined.

Abstract: Provided is a device for ensuring safe operation of a technical system configured to generate a smart contract including a condition to be fulfilled for safe operation of a technical system, to store smart contract data of the smart contract in a distributed ledger, and to determine if the technical system fulfills the condition using the smart contract.

Abstract: A computer-implemented method for determining automatically a machine safety and/or a product quality of a flexible cyber-physical production system with a configuration adaptable during a production process including production steps executed by machines forming equipment of a physical factory of the cyber-physical production system to produce a product according to a product recipe, wherein the machine safety and/or product quality are calculated during runtime of the flexible cyber-physical production system by processing a meta-model of the flexible cyber-physical production system stored in a computer readable storage medium, is provided.

Abstract: The computer-implemented method for testing a technical system having a plurality of technical components includes: providing a safety model modeling a safety relevant functionality of the technical system, providing a test model including test cases for testing the technical system, linking elements of the safety model with elements of the test model for enabling a tracing between the test cases of the test model and the safety-relevant functionality of the safety model, generating test parameters for at least one certain test case of the test cases and/or a new test case for the test model using the safety model linked to the test model, and testing the technical system using the certain test case and/or the new test case. Further, a computer program product, a computerized device and an arrangement having a technical system and a computerized device are provided.

Abstract: The computer-implemented method for testing a technical system having a plurality of technical components includes: providing a safety model modeling a safety relevant functionality of the technical system, providing a test model describing test cases for testing the technical system, linking elements of the safety model with elements of the test model for enabling a tracing between the test cases of the test model and the safety-relevant functionality of the safety model, testing the technical system using at least one of the test cases generated based on the test model linked with the safety model, and analyzing the testing for providing coverage criteria for the safety-relevant functionality. Further, a computer program product, a computerized device and an arrangement having a technical system and a computerized device are suggested.

Abstract: Provided is a method for dynamic adaption of a workflow, WF, of an automation system, AS, wherein the workflow, WF, includes automated handling functions, AHFs, implementing associated production steps of a production process controlled by a workflow processor, WP, of a machine of the automation system and at least one automated handling function, AHF, shell configured to plug a pluggable automated handling function, pAHF, into the workflow, WF, of the automation system during runtime of the automation system for adaption of the workflow, WF.

Abstract: A method and system for upgrading a service or microservice within a system where an updated version of the service is employed in the system without immediately allowing the service from assuming control of the final output of the system is provided.

Abstract: A method for memory modification resulting in a test probe for examining a program under test substantially during run-time is provided. The ability to inject faults or errors in order to test a reaction of the program to a fault in a particular state and to individually replace access to a regular operand by accessing a shadow operand allow for non-intrusive tests while the program is substantially executed in real-time. The program itself is not substantially altered for testing purposes.

Abstract: Provided is a method for dynamic adaption of a workflow, WF, of an automation system, AS, wherein the workflow, WF, includes automated handling functions, AHFs, implementing associated production steps of a production process controlled by a workflow processor, WP, of a machine of the automation system and at least one automated handling function, AHF, shell configured to plug a pluggable automated handling function, pAHF, into the workflow, WF, of the automation system during runtime of the automation system for adaption of the workflow, WF.

Abstract: The disclosed embodiments relate to a method for memory modification resulting in a test probe for examining a program under test substantially during run-time. The ability to inject faults or errors in order to test the program's reaction to a fault in a particular state and to individually replace access to a regular operand by accessing a shadow operand allow for non-intrusive tests while the program is substantially executed in real-time and whereby the program itself is not substantially altered for testing purposes.

Abstract: Provided is a method and system for conducting automatically a process failure mode and effect analysis, PFMEA, for a factory adapted to produce a product in a production process using a meta model, MM, stored or loaded in a data storage, wherein the stored meta model, MM, comprises abstract factory model elements modeling an abstract factory, AF, including one or more service declarations modeling abstract services across different factories, wherein each service declaration comprises failure mode declarations for different failure modes.

Abstract: In a system having system components that communicate with one another internally by a common database and connected to a system environment of the system by at least one first interface of the system, events are analyzed by isolating a system component of the system from the system environment when an integrity component of the system detects the occurrence of a certain event in the system component. Then, the control of the isolated system component is transferred to an analysis component of the system by the integrity component. The analysis component establishes a communication connection to an external analysis unit by a second interface of the system and the external analysis unit analyzes the event that occurred in the isolated system component, based on the component data of the isolated system component that are stored in the common database of the system.

Abstract: At least one embodiment of the present invention relates to supporting a safety-oriented system, with the safety-oriented system including safety-critical software components and non-safety-critical software components. In this method, a possibility of a safety-critical software component and a non-safety-critical software component influencing each other is identified and a set of technical measures for preventing the possibility of influencing is defined. In this way, an absence of feedback from non-safety-critical software components to safety-critical software components is both verified and also ensured by at least one embodiment of the present invention.

Abstract: A method and system for transmitting a message in real time between users in a closed network of a vehicle (1), in particular a rail-mounted vehicle, are provided, wherein safety-relevant real-time data (D) of a message (N), including a transmitter ID of a transmitter (3) within the closed network, is encrypted (S1) using a private key (KprivA) of the transmitter (3) in order to generate an encrypted message (N?); the encrypted message (N?), together with the unencrypted transmitter ID of the transmitter (3), is transmitted (S2) from the transmitter (3) to a receiver (4) within the closed network via a vehicle bus (2), and the encrypted message (N?) is decrypted by the receiver (4) using a public key (KpublicA) of the transmitter (3) identified by the received, unencrypted transmitter ID in order to retrieve the unencrypted message (N).

Abstract: IN a method and a device for determining a probability of occurrence that an overall system fulfills a predefined system performance, the overall system is composed of instances of different classes of partial systems, and each class of partial systems has an associated class fault tree. The method has the following steps: (a) calculating (S1) an overall performance for each failure combination of the number of non-failed instances within a class; (b) automatic selection (S2) of failure combinations, the calculated overall performance of which fulfills the predefined system performance; (c) automatic generation (S3) of an overall fault tree based on the class fault trees of partial systems as a function of the selected failure combinations; and (d) evaluating (S4) of the generated overall fault tree for calculating the probability of occurrence of a fulfillment of the predefined system performance by the overall system.

Abstract: A system for monitoring a security-related system has a monitoring device on which a first process occurs. The monitoring device generates a monitoring result which is transmitted to another device that forms at least part of the security-related system. Accordingly, a second monitored process of the security-related system returns the received monitoring result to the first process for testing in order to calculate a processing result.