Abstract: A system for data transmission between a client device, a server device and a plurality of automation devices, wherein the server device includes a descriptive representation of each of the plurality of automation devices, wherein the server device includes a server instance, which server instance is configured to load one of the descriptive representations based on a hostname identifying one of the plurality of automation devices, and wherein the server instance is configured to transmit data from the automation device to a client application on the client device based on the loaded descriptive representation of the automation device.

Abstract: A system and method for providing time-critical services that are each assigned at least one server component formed by a software container which is loadable into a process control environment and which is executable at the process control environment, wherein a virtual IP stack is provided for each server component, which is connected to a virtual switch comprised by the process control environment, where each service additionally comprises a directory service component for determining services provided within the process control environment, where the directory service components are interconnected via a communication interface which is separated from the virtual switch and from the virtual IP stacks of the server components, and where an aggregator component formed via an additional software container is connected to the separated communication interface, where the aggregator component makes available, outside of the process control environment, reconciled information regarding the services provided via t

Abstract: Method and system for providing time-critical services via a flow control environment, wherein at least one respective server component is provided for each service, wherein the server component is formed by a flow control component that is loadable into the flow control environment and executed there, where a configuration unit for at least one gateway component of a subnetwork forming the flow control environment ascertains globally valid access information associated with respective addressing information of the server components that is valid within the subnetwork, based on a mode of operation predefined via the configuration unit, one or more gateway components connected in parallel and/or in series are used, and where the at least one gateway component forwards service access requests to the server components in accordance with the forwarding and/or filter rules and the mode of operation.

Abstract: Automation system, apparatus and method for coupling a device network and a communication network, wherein the system verifies addressing of components in an automation system having a hyper-convergent infrastructure, where a gateway extends data telegrams to include a device-specific signature if such a signature cannot be implemented by the automation device of the automation system itself.

Abstract: Method and system for providing control applications for industrial automation devices, wherein in order to provide control applications, which are each provided via flow control components, the flow control components are each classified, based on configuration information, or referenced memory maps, with respect to access to at least one socket of a flow control environment when their execution is started, where a classification for each of the flow control components is used to create or reference a permissions profile for socket access, an individual token, associated with a permissions profile, for the socket access is created for each flow control component and transferred to the respective flow control component, and where the tokens and/or the permissions profiles each have an application-specific resource access guideline combined with therewith which is transmitted to a control component for application, which control component opens the respective socket.

Abstract: A method for securely executing control applications via software-implemented containers which are each loadable into a container runtime environment set up on a host and are executable there, wherein a check component of the respective host calculates a respective check identifier via host-specific features and via features of the respective control application, where the check identifier and an initial application certificate of the control application are communicated to a registration component, the registration component verifies the check identifier and the initial application certificate and, in cases of a positive verification result, creates a device configuration certificate and an application instance certificate and communicates them to the host, linking of the application instance certificate with the control application is authorized via the device configuration certificate, and where execution of the container providing the control application on the host is authorized by the application instan

Abstract: Method and system for providing time-critical services via a flow control environment, wherein at least one respective server component is provided for each service, wherein the server component is formed by a flow control component that is loadable into the flow control environment and executed there, where a configuration unit for at least one gateway component of a subnetwork forming the flow control environment ascertains globally valid access information associated with respective addressing information of the server components that is valid within the subnetwork, based on a mode of operation predefined via the configuration unit, one or more gateway components connected in parallel and/or in series are used, and where the at least one gateway component forwards service access requests to the server components in accordance with the forwarding and/or filter rules and the mode of operation.

Abstract: A system and method for providing time-critical services that are each assigned at least one server component formed by a software container which is loadable into a process control environment and which is executable at the process control environment, wherein a virtual IP stack is provided for each server component, which is connected to a virtual switch comprised by the process control environment, where each service additionally comprises a directory service component for determining services provided within the process control environment, where the directory service components are interconnected via a communication interface which is separated from the virtual switch and from the virtual IP stacks of the server components, and where an aggregator component formed via an additional software container is connected to the separated communication interface, where the aggregator component makes available, outside of the process control environment, reconciled information regarding the services provided via t

Abstract: Automation device, computer program, computer-readable medium and method for automatically configuring an automation device, wherein a) an automation device is provided, b) a device management unit monitors whether an automation identifier is assigned to the automation device, c) upon identifying an assignment of this kind, the device management unit queries a central cluster management unit to determine whether a description object, in which the automation identifier assigned to the automation device is stored, already exists in a cluster state database belonging to the cluster containing description objects for nodes of the cluster, d) if no such description object yet exists, or if such a description object does exist but has been declared inactive, then the device management unit creates, in the cluster state database for a node identifier assigned to the automation device, a description object in which the automation identifier assigned to the automation device is stored.

Abstract: A system, computer program, computer-readable medium and method for providing a redundant relay, particularly routing function in a network, wherein a superordinate subnetwork is connected to a subordinate subnetwork via redundant relays, particularly routers, a maximum of one of the redundant relays is operated in an active mode at any one time, while the remaining relay(s) are in standby mode, each redundant relay forms a relay redundancy module for controlling the relay mode and a DHCPv6 client for processing a prefix delegation, particularly in accordance with RFC 3633, and the redundant relays each include a relay control module, to which the relay redundancy module of the particular relay signals the current relay mode, and the relay control module of the active relay synchronizes a virtual DUID of its DHCPv6 client and/or a prefix delegated to the active relay to the (or each) relay in standby mode.

Abstract: Method for synchronizing control applications via a communication network for transferring time-critical data, wherein network infrastructure devices determine, for the forwarding of datagrams associated with selected data streams, respective time delays between a planned transmission time of the datagram and an actual transmission time of the datagram in question, where the selected data streams are assigned to control applications running on communication terminals, and where a beginning of a next end-node-side transfer cycle is determined by a starting-node-side control application based on the time delay determined by a preceding network infrastructure device in question, an accumulated maximum time delay and a transmission time of the datagrams to achieve synchronization between transfer cycles of starting-node-side control applications and transfer cycles of end-node-side control applications.

Abstract: Method for detecting data traffic in a communication network, wherein in order to detect data traffic in a communication network, at least one network infrastructure device to which at least one first communication terminal and one second communication terminal are connected provides a monitoring interface that is secured against unauthorized access, is assigned to the two communication terminals, and is intended for detecting data traffic between at least the first and the second communication device, where a device detecting apparatus determines available monitoring interfaces on network infrastructure devices as well as address information assigned to the monitoring interfaces and provides this interface information to at least one recording apparatus that is separate from the at least one network infrastructure device.

Abstract: A method for providing topology information, use of a name service server, a device, a computer program, a computer-readable medium and a method for configuring a device to be named within an industrial network, wherein a) the device to be named receives a neighbouring name message from a neighbouring device, b) a self-naming module creates a topological neighbouring domain name based on the neighbouring name message, c) the self-naming module transmits the topological neighbouring domain name to a name service server, d) the self-naming module receives from the name service server a response message, which includes at least one device name of the device to be named belonging to the topological neighbouring domain name, and e) at least one device name from the response message is assigned to the device to be named and this name is stored as the device name by the self-naming module.

Abstract: A system for data transmission between a client device, a server device and a plurality of automation devices, wherein the server device includes a descriptive representation of each of the plurality of automation devices, wherein the server device includes a server instance, which server instance is configured to load one of the descriptive representations based on a hostname identifying one of the plurality of automation devices, and wherein the server instance is configured to transmit data from the automation device to a client application on the client device based on the loaded descriptive representation of the automation device.

Abstract: A method for capturing packets originating from a first container from a cluster of containers that each container includes at least one network interface for transmitting packets, wherein the method includes detecting a first connection for transmission of packets from a first network interface associated with a first container and injecting container information of the first container in a packet stream associated with the first connection, where the injected container information serves for identification of the first container by a packet capture tool configured to capture the packet stream associated with the first connection.

Abstract: A method for establishing a stream in a Time-Sensitive Networking (TSN) network, wherein a request message is sent by a stream subscriber to a Domain Name System (DNS) server, upon which entries are stored that each comprise a stream identifier of a first type assigned to a stream, and a stream identifier of a second type that is different from the first type and is assigned to the respective stream, and the specification of a predefined type exclusively used for, or forms these types of entries, where the request message comprises a stream identifier of the first type and the predefined type known to the at least one stream subscriber, where the stream subscriber receives a response message from the DNS server, which contains a stream identifier of the second type belonging to the stream, and where the stream subscriber logs on to the stream using the stream identifier obtained.

Abstract: Coordinator and method for providing control applications via a communication network, wherein prior to migrating a flow control component of a control application to a server device, a coordinator checks whether a data stream for transmitting application data was set up for the control application, where the coordinator enables migration of the flow control component if a data stream has not been set up, in the event a data stream had been set up previously, a check is performed to determine whether sufficient resources for data transmission are available for paths to the server device, such that if sufficient resources are unavailable, migration of the respective flow control component is stopped, and if sufficient resources are available, the coordinator prompts set-up of the data stream to the server device and disconnection of the previously set-up data stream and enables migration of the flow control component to the server device.

Abstract: A method in which a monitoring unit allocated to a communication device checks, based on a name resolution protocol, whether a second communication network address allocated to the first communication device becomes valid in order to set up an uninterrupted communication connection to the communication device that is allocated to an industrial automation system, where in cases of an allocation of a new valid communication network address and an existing communication connection, the monitoring unit initiates a set-up of an additional communication connection using the new communication network address.

Abstract: A method for automatic address configuration, router, computer program, computer-readable medium and method for automatically configuring a router that has an upstream interface, connected or connectable to a higher-level subnetwork and/or a higher-level router, and a downstream interface, connected or connectable to a lower-level subnetwork, wherein whether the router receives, on the upstream interface, messages providing notification of at least one domain as part of a DNS search list option, is monitored and, if the message is not received over a prescribed period, a DNS island mode is automatically activated in which the DNS zone of a local DNS server of the router is configured using a predefined island domain, and a transmission module of the router is prompted to send a message via the downstream interface, which message includes the preconfigured island domain as part of a DNS search list option, preferably an address of the downstream interface.

Abstract: Coordinator and method for providing control applications via a communication network, wherein prior to migrating a flow control component of a control application to a server device, a coordinator checks whether a data stream for transmitting application data was set up for the control application, where the coordinator enables migration of the flow control component if a data stream has not been set up, in the event a data stream had been set up previously, a check is performed to determine whether sufficient resources for data transmission are available for paths to the server device, such that if sufficient resources are unavailable, migration of the respective flow control component is stopped, and if sufficient resources are available, the coordinator prompts set-up of the data stream to the server device and disconnection of the previously set-up data stream and enables migration of the flow control component to the server device.