Abstract: A railway safety critical application system substitutes commercial off-the-shelf (COTS) hardware and/or software for railway-domain specific product components, yet is validated to conform to railway safety critical system failure-free standards. The safety critical system uses a pair of tasks executed on a controller of a COTS personal computer or within a virtual environment with asymmetric communications capability. Both tasks receive and verify safety critical systems input message data and security code integrity and separately generate output data responsive to the input message. The first task has sole capability to send complete safety critical system output messages, but only the second task has the capability of generating the output security code. A failure of any of systems hardware, software or processing capability results failure to transmit a safety critical system output message or an output message that cannot be verified by other safety critical systems.

Abstract: A railway safety critical application system substitutes commercial off-the-shelf (COTS) hardware and/or software for railway-domain specific product components, yet is validated to conform to railway safety critical system failure-free standards. The safety critical system uses a pair of tasks executed on a controller of a COTS personal computer or within a virtual environment with asymmetric communications capability. Both tasks receive and verify safety critical systems input message data and security code integrity and separately generate output data responsive to the input message. The first task has sole capability to send complete safety critical system output messages, but only the second task has the capability of generating the output security code. A failure of any of systems hardware, software or processing capability results failure to transmit a safety critical system output message or an output message that cannot be verified by other safety critical systems.

Abstract: The present disclosure relates to sensors, and the teaching may be applied to a device for determining a speed of a sound signal in a fluid in a fluid container. A device may include: a sound transducer for transmitting and receiving sound; a first reflector element and a second reflector element integrally formed in a reference element to reflect sound generated by the sound transducer back to the sound transducer; and a control unit operating to: ascertain a first signal runtime related to a first reflection of the sound signal from the first reflector element; a second signal runtime related to of a second reflection of the sound signal from the second reflector element; and calculate the speed as a function of the two.

Abstract: A railway safety critical application system substitutes commercial off-the-shelf (COTS) hardware and/or software for railway-domain specific product components, yet is validated to conform to railway safety critical system failure-free standards. The safety critical system uses a pair of tasks executed on a controller of a COTS personal computer or within a virtual environment with asymmetric communications capability. Both tasks receive and verify safety critical systems input message data and security code integrity and separately generate output data responsive to the input message. The first task has sole capability to send complete safety critical system output messages, but only the second task has the capability of generating the output security code. A failure of any of systems hardware, software or processing capability results failure to transmit a safety critical system output message or an output message that cannot be verified by other safety critical systems.

Abstract: A railway safety critical application system substitutes commercial off-the-shelf (COTS) hardware and/or software for railway-domain specific product components, yet is validated to conform to railway safety critical system failure-free standards. The safety critical system uses a pair of tasks executed on a controller of a COTS personal computer or within a virtual environment with asymmetric communications capability. Both tasks receive and verify safety critical systems input message data and security code integrity and separately generate output data responsive to the input message. The first task has sole capability to send complete safety critical system output messages, but only the second task has the capability of generating the output security code. A failure of any of systems hardware, software or processing capability results failure to transmit a safety critical system output message or an output message that cannot be verified by other safety critical systems.

Abstract: A fill level sensor for detecting the fill level of a liquid in a container includes an ultrasonic transceiver, an inner tube for arrangement inside the container, the inner tube being arranged above the ultrasonic transceiver such that a liquid present in the container forms a liquid column in the inner tube the level of which can be detected by the ultrasonic transceiver, an outer tube surrounding the inner tube, and a cap which covers the inner tube and the outer tube toward the top. The cap has an inner tubular section adjoining the inner tube, an outer tubular section adjoining the outer tube, an inner vent opening for the inner tubular section and an outer vent opening for the outer tubular section.

Abstract: A railway safety critical application system substitutes commercial off-the-shelf (COTS) hardware and/or software for railway-domain specific product components, yet is validated to conform to railway safety critical system failure-free standards. The safety critical system uses a pair of tasks executed on a controller of a COTS personal computer or within a virtual environment with asymmetric communications capability. Both tasks receive and verify safety critical systems input message data and security code integrity and separately generate output data responsive to the input message. The first task has sole capability to send complete safety critical system output messages, but only the second task has the capability of generating the output security code. A failure of any of systems hardware, software or processing capability results failure to transmit a safety critical system output message or an output message that cannot be verified by other safety critical systems.

Abstract: A railway safety critical application system substitutes commercial off-the-shelf (COTS) hardware and/or software for railway-domain specific product components, yet is validated to conform to railway safety critical system failure-free standards. The safety critical system uses a pair of tasks executed on a controller of a COTS personal computer or within a virtual environment with asymmetric communications capability. Both tasks receive and verify safety critical systems input message data and security code integrity and separately generate output data responsive to the input message. The first task has sole capability to send complete safety critical system output messages, but only the second task has the capability of generating the output security code. A failure of any of systems hardware, software or processing capability results failure to transmit a safety critical system output message or an output message that cannot be verified by other safety critical systems.

Abstract: A LED illumination module has at least one LED (6). At a proximal side there is a first electric connection contact (8) and at an axially oppositely directed distal side there is a second electrical connection contact (10) as well as a radiation region emitting radiation. The LED (6), at the second electrical connection contact (10), is contacted via an electrically conductive sleeve (14) which, distanced to the proximal end, is electrically conductively connected to the second connection contact (10) of the LED (6).

Abstract: A fill level sensor for detecting the fill level of a liquid in a container includes an ultrasonic transceiver, an inner tube for arrangement inside the container, the inner tube being arranged above the ultrasonic transceiver such that a liquid present in the container forms a liquid column in the inner tube the level of which can be detected by the ultrasonic transceiver, an outer tube surrounding the inner tube, and a cap which covers the inner tube and the outer tube toward the top. The cap has an inner tubular section adjoining the inner tube, an outer tubular section adjoining the outer tube, an inner vent opening for the inner tubular section and an outer vent opening for the outer tubular section.

Abstract: A railway safety critical application system substitutes commercial off-the-shelf (COTS) hardware and/or software for railway-domain specific product components, yet is validated to conform to railway safety critical system failure-free standards. The safety critical system uses a pair of tasks executed on a controller of a COTS personal computer or within a virtual environment with asymmetric communications capability. Both tasks receive and verify safety critical systems input message data and security code integrity and separately generate output data responsive to the input message. The first task has sole capability to send complete safety critical system output messages, but only the second task has the capability of generating the output security code. A failure of any of systems hardware, software or processing capability results failure to transmit a safety critical system output message or an output message that cannot be verified by other safety critical systems.

Abstract: A railway vital or critical application system substitutes commercial off-the-shelf (COTS) hardware and/or software for railway-domain specific product components, yet is validated to conform with railway vital system failure-free standards. The vital system uses a pair of COTS personal computers and operating systems with asymmetric communications capability. Each computer and operating system may differ for additional redundancy. Both computers receive and verify vital systems input message data and security code integrity and separately generate output data responsive to the input message. The first computer has sole capability to send vital system output messages including the output data and an output security code, but only the second computer has the capability of generating the output security code. A failure of either computer's hardware, software or processing capability results failure to transmit a vital system output message or an output message that cannot be verified by other vital systems.

Abstract: A railway vital or critical application system substitutes commercial off-the-shelf (COTS) hardware and/or software for railway-domain specific product components, yet is validated to conform with railway vital system failure-free standards. The vital system uses a pair of COTS personal computers and operating systems with asymmetric communications capability. Each computer and operating system may differ for additional redundancy. Both computers receive and verify vital systems input message data and security code integrity and separately generate output data responsive to the input message. The first computer has sole capability to send vital system output messages including the output data and an output security code, but only the second computer has the capability of generating the output security code. A failure of either computer's hardware, software or processing capability results failure to transmit a vital system output message or an output message that cannot be verified by other vital systems.

Abstract: A uterus manipulator includes a shank, in which a hollow probe is guided, whose distal end section is envisaged and designed for introduction into a uterus through the cervical canal. A handle is provided on the proximal side. A distally open bell and a vaginal seal, arranged proximally displaced thereto, as well as a suction channel which connects to at least one suction opening in the distal end section, are provided for receiving a cervix. The bell is designed as a suction bell, wherein at least one suction channel runs into the bell.

Abstract: A device for picture-providing diagnosis of tissue is selectively operated in a picture-providing white light diagnosis mode and a picture providing auto-fluorescence mode. A color camera having red, green, and blue sensors provides a monitor which picture signals. A light source emits fluorescence excitation light and additionally emits so much red light that the red light remitted by the tissue dominates the red fluorescence light in the picture providing auto-fluorescence mode. The signal from the red sensor of the camera is damped so that normal time appears green and pre-malignant and early malignant tissue appears red.

Abstract: A uterus manipulator includes a shank, in which a hollow probe is guided, whose distal end section is envisaged and designed for introduction into a uterus through the cervical canal. A handle is provided on the proximal side. A distally open bell and a vaginal seal, arranged proximally displaced thereto, as well as a suction channel which connects to at least one suction opening in the distal end section, are provided for receiving a cervix. The bell is designed as a suction bell, wherein at least one suction channel runs into the bell.

Abstract: An endoscopic instrument is provided with an LED illumination module having at least one LED arranged at the distal end of the instrument and having an electrical connection lead attached to this LED. The connection lead is a coaxial cable, which extends from the distal end to the proximal end of the instrument, and is designed for leading away the waste heat produced by the LED. At least one electrical conductor of the coaxial cable is connected to the LED in a heat-conducting manner.

Abstract: The invention relates to a device for the picture-providing and spectroscopic diagnosis of tissue with the alternative or combined use of three diagnosis methods, specifically a mode A for the picture-providing white light diagnosis, a mode B for the picture-providing fluorescence diagnosis and a mode C for the fluorescence-spectroscopic diagnosis. The device comprises a first light means whose light as a beam bundle via a beam path is coupled into an optical fiber leading to an endoscope and a second illumination means whose light as a beam bundle via a second beam path may be coupled into the same fiber-optic. In the first beam path there is arranged an element widening the bundle opening, for the light beam bundle entering into the fiber-optic and in the second beam path there is arranged an element limiting the bundle opening, for the light beam bundle entering into the fiber-optic.

Abstract: There is described a device for the picture-providing diagnosis of tissue with the selective application of two diagnosis methods, specifically an operating mode for the picture-providing white light diagnosis and an operating mode for the picture-providing auto-flourescence. The device has a light source whose light is led to the tissue via an endoscope, wherein in the endoscope there is arranged a picture transmission unit which leads the picture of the tissue to a color camera. The color camera comprises three sensors allocated to the color regions red, green and blue which are in connection with a picture processor unit which provides a monitor with the picture signals.

Abstract: Apparatus for stacking sheets comprises a collecting bin with a front stationary abutment and a rear limiting element adjustable to various sheet size ranges. A first deflecting roller, adjustable in the entrance direction of the sheets and mounted on a rear limiting element, provides support for a transport belt transporting the sheets. The rear limiting element is mounted on a support which is movable in the entrance direction by means of two parallel threaded spindles rotatable by a stepping motor. A second deflecting roller which is associated with the outer side of the transport belt facing the sheet stack is arranged on the support, whereas the first deflecting roller is located on the inner side of the transport belt. Adjacent to the second deflecting roller, a stationary deflecting roller is arranged such that the transport belt is guided along an S-shaped path.