Abstract: The present disclosure relates to the field of processing data in the stream processing network, such as processing data having data streams associated with multiple owners or entities. A method is disclosed of secure processing of input data by a stream processing network having first and second processing units, wherein the method can include: a) receiving input data from a communication channel, wherein the input data includes a first data stream associated with a first owner and a second data stream associated with a second owner; b) distinguishing data packets of the first data stream from that of the second data stream; and c) processing the first data stream with the first processing unit.

Abstract: A method for planning a charging of an electrical vehicle comprises receiving a request for charging from an electrical vehicle at a charging pole, determining a charging time slot for the electrical vehicle based on the request for charging, scheduling the charging time slot for the electrical vehicle, predicting a load requirement for the charging pole based on the request for charging and the charging time slot, and sending the load requirement to a grid operator supplying the charging pole with electrical power.

Abstract: A method of inspecting equipment of a power system can involve identifying a geographical area including a presumed faulty piece of equipment with a central computer system of the power system; determining a contact (e.g., a person) at the geographical area; sending a request for inspecting local equipment in the geographical area to the person; taking a picture, by the person, of a piece of local equipment; transmitting the picture to the central computer system; and evaluating at the central computer system, whether the piece of local equipment in the picture is faulty or not.

Abstract: A method for planning a charging of an electrical vehicle comprises receiving a request for charging from an electrical vehicle at a charging pole, determining a charging time slot for the electrical vehicle based on the request for charging, scheduling the charging time slot for the electrical vehicle, predicting a load requirement for the charging pole based on the request for charging and the charging time slot, and sending the load requirement to a grid operator supplying the charging pole with electrical power.

Abstract: The present disclosure relates to the field of processing data in the stream processing network, such as processing data having data streams associated with multiple owners or entities. A method is disclosed of secure processing of input data by a stream processing network having first and second processing units, wherein the method can include: a) receiving input data from a communication channel, wherein the input data includes a first data stream associated with a first owner and a second data stream associated with a second owner; b) distinguishing data packets of the first data stream from that of the second data stream; and c) processing the first data stream with the first processing unit.

Abstract: A method of inspecting equipment of a power system can involve identifying a geographical area including a presumed faulty piece of equipment with a central computer system of the power system; determining a contact (e.g., a person) at the geographical area; sending a request for inspecting local equipment in the geographical area to the person; taking a picture, by the person, of a piece of local equipment; transmitting the picture to the central computer system; and evaluating at the central computer system, whether the piece of local equipment in the picture is faulty or not.

Abstract: The client requests from the authentication and authorization server a capability for accessing the target server. The authentication and authorization server sends client a capability (capC,S) comprising the public key (pubC) of the client, said capability being signed with a private key (privAA) of the authentication and authorization server. The client sends the capability (capC,S) to the target server. If the capability is valid, the target server grants the client access and a data exchange session can be initiated. The disclosed protocol is scalable, as it does not require individual configuration of each target server device, allows revocation of user access within reasonable time, stores no compromisable secret data on any target server device, enables individual access permission per user, and accountability of each user.

Abstract: The present invention is concerned with an alarm system and a method for suppressing redundant alarms in a monitored system. The alarm system comprises a process control unit, an FDI unit, a filter, and an alarm display unit. The process control unit detects anomalies in the monitored system and generates alarms corresponding to them. The FDI unit diagnoses failures in the monitored system and generates a failure-cause-effect graph comprising a list of generated alarms, along with the alarms corresponding to the causes and effects of each listed alarm. The FDI unit dynamically updates the failure-cause-effect graph concurrently with the generation of alarms by the process control unit and the diagnosis of failures by the FDI unit. The filter receives the generated alarms and identifies redundant and not-yet-classified alarms from the received alarms, by using the failure-cause-effect graph.

Abstract: An entity to be validated for consistency is loaded into the buffer of the consistency service, a signal to verify the existence of a specific data set of an IT system is then sent by the consistency service to the IT system holding the entity to be validated for consistency, and the consistency validating information is stored in the output means, said consistency validating information depending on the signal being sent back to the consistency service. The consistency of data stored in various IT systems is checked prior to attempting to access it. Errors by calling a service or functionality that would require access to data that is not available or that is inconsistent can therefore be avoided.

Abstract: The client requests from the authentication and authorization server a capability for accessing the target server. The authentication and authorization server sends client a capability (capC,S) comprising the public key (pubC) of the client, said capability being signed with a private key (privAA) of the authentication and authorization server. The client sends the capability (capC,S) to the target server. If the capability is valid, the target server grants the client access and a data exchange session can be initiated. The disclosed protocol is scalable, as it does not require individual configuration of each target server device, allows revocation of user access within reasonable time, stores no compromisable secret data on any target server device, enables individual access permission per user, and accountability of each user.

Abstract: The present invention is concerned with an alarm system and a method for suppressing redundant alarms in a monitored system. The alarm system comprises a process control unit, an FDI unit, a filter, and an alarm display unit. The process control unit detects anomalies in the monitored system and generates alarms corresponding to them. The FDI unit diagnoses failures in the monitored system and generates a failure-cause-effect graph comprising a list of generated alarms, along with the alarms corresponding to the causes and effects of each listed alarm. The FDI unit dynamically updates the failure-cause-effect graph concurrently with the generation of alarms by the process control unit and the diagnosis of failures by the FDI unit. The filter receives the generated alarms and identifies redundant and not-yet-classified alarms from the received alarms, by using the failure-cause-effect graph.

Abstract: The inventive IT Security System for intrusion detection in a private network, which is connected to a public network, comprises a processing system, a supervisory system and an interface system. The processing system detects intrusion or unwanted access of resources on a private network and alerts in case of a detected intrusion or unwanted access of resources by creating quantitive alert data. The supervisory system automatically processes the alerts or presents the alerts to a security system operator. The interface system transfer the alerts from the processing system to the supervisory system. Available data about network activity can thus be presented to the operator in an intuitive and non-technical manner. If the operator suspects the security of the network to be compromised he can safely isolate the private network from the outside world, as simple reaction to any threat endangering the private network environment.

Abstract: The object of the invention is to provide a software component (1, 2, 3) for a distributed control system having application units (4, 5) which have one or more logic function nodes which each define an individual control system function in the application units and interact with one another, or can interact with one another, in order to achieve a desired functionality for the control system; having a function means for implementation of a logic function node; a negotiation means for receiving a connection instruction relating to a connection to be set up to at least one further function node and for agreeing upon possible usable connection parameters between the function node and the at least one further function node during a composition phase of the control system; and a connection means for setting the negotiated connection parameters between the function means and for data transmission between the connected function means during a runtime of the control system.

Abstract: For the control of an electric power transmission network, where local protection functions are implemented by a plurality of local protection devices (3,3a,3b,3b?,3c) located at a plurality of locations throughout the network, the following steps are executed measuring phasor data for voltages and currents at a plurality of locations (A,B) of the network, transmitting said phasor data to a central processing device (2), emulating, in the central processing device (2), protection functions that are implemented in the local protection devices (3,3a,3b,3b?,3c), and executing, in accordance with a given redundancy strategy, control commands that are issued redundantly by the local protection devices (3,3a,3b,3b?,3c) and by the central processing device (2). In a preferred variant of the invention, values of predetermined parameters that are used in the protection function, in particular protection threshold values, are adapted to measured values.

Abstract: For the control of an electric power transmission network, where local protection functions are implemented by a plurality of local protection devices (3,3a,3b,3b′,3c) located at a plurality of locations throughout the network, the following steps are executed

Abstract: The invention relates to a preprocessor (2) for a predetermined document type definition (DTD), comprising at least one predetermined interface for interchanging information with interfaces of application units (1, 6); and comprising a conversion means for converting application information from an application unit (1, 6) into calls to a markup language processor (3), with the calls satisfying the DTD, and for converting markup language information from the markup language processor (3) into return information for transmission to an application unit (1, 6), with the return information being interpretable by the application unit (1, 6). The invention is likewise based on an overall system having the preprocessor (2), and on a method for processing a markup language file (5).

Abstract: The object of the invention is to provide a software component (1, 2, 3) for a distributed control system having application units (4, 5) which have one or more logic function nodes which each define an individual control system function in the application units and interact with one another, or can interact with one another, in order to achieve a desired functionality for the control system; having a function means for implementation of a logic function node; a negotiation means for receiving a connection instruction relating to a connection to be set up to at least one further function node and for agreeing upon possible usable connection parameters between the function node and the at least one further function node during a composition phase of the control system; and a connection means for setting the negotiated connection parameters between the function means and for data transmission between the connected function means during a runtime of the control system.