Abstract: A monitoring production of a technical apparatus in a secure and reliable manner is provided. This monitoring is achieved using encapsulation of a first distributed ledger into a second distributed ledger.

Abstract: A monitoring production of a technical apparatus in a secure and reliable manner is provided. This monitoring is achieved using encapsulation of a first distributed ledger into a second distributed ledger.

Abstract: At least one embodiment of the present invention relates to supporting a safety-oriented system, with the safety-oriented system including safety-critical software components and non-safety-critical software components. In this method, a possibility of a safety-critical software component and a non-safety-critical software component influencing each other is identified and a set of technical measures for preventing the possibility of influencing is defined. In this way, an absence of feedback from non-safety-critical software components to safety-critical software components is both verified and also ensured by at least one embodiment of the present invention.

Abstract: Apparatuses and methods are provided for the identification of external influences on at least one processing unit in a set of processing units in an embedded system. An arrangement configured for this purpose may include: a data generator configured to generate data which is designed to identify external influences on at least one processing unit in the set of processing units; a sensor circuit including a set of electronic elements, wherein the electronic elements are configured to store data, wherein the sensor circuit is configured to transmit the data to a data checker by sequential buffer storage of the data in the electronic elements; and the data checker, configured to check the correctness of the data.

Abstract: At least one embodiment of the present invention relates to supporting a safety-oriented system, with the safety-oriented system including safety-critical software components and non-safety-critical software components. In this method, a possibility of a safety-critical software component and a non-safety-critical software component influencing each other is identified and a set of technical measures for preventing the possibility of influencing is defined. In this way, an absence of feedback from non-safety-critical software components to safety-critical software components is both verified and also ensured by at least one embodiment of the present invention.

Abstract: Disclosed is a full error description for a technical system which is described by a system description which can be processed by a computer and stored. The system description contains information on elements available in system and information on the links therebetween. An element error description is determined for each element taken into consideration, using a stored error description which is respectively associated with a reference element. At least one part of the reference elements is grouped into a reference element group and a group error description is determined for the reference elements of a reference element group using a stored group error description which is respectively associated with a reference element group, enabling possible errors of the reference elements of the reference element group to be described. A full error description is determined from the element error descriptions and the group error descriptions, taking into account information on element links.

Abstract: The faults are described using a fault description which comprises data which have been determined using failure modes and effects analysis. The fault description is extended by information regarding the dependency of possible faults and the frequency of occurrence of said faults. The extended fault description is used to ascertain, for a prescribed fault event, the fault tree and the frequency of occurrence of the fault event.

Abstract: Disclosed is a full error description for a technical system which is described by means of a system description which can be processed by a computer and stored. The system description contains information on elements available in said system and information on the links therebetween. An element error description is determined for each element taken into consideration, using a stored error description which is respectively associated with a reference element. At least one part of the reference elements is grouped into a reference element group and a group error description is determined for the reference elements of a reference element group using a stored group error description which is respectively associated with a reference element group, enabling possible errors of the reference elements of the reference element group to be described. A full error description is determined from the element error descriptions and the group error descriptions, taking into account information on element links.

Abstract: A navigation method involves a processor selecting at least one destination from a stipulated destination category containing a plurality of destinations (P1; P2; P3; P4) and calculating a route to the destination. In the event of a change in the location (V1; V2), the processor checks whether a new destination (P1; P2; P3; P4) from the stipulated destination category is closer to the changed location. If the new destination is closer to the changed location, a route is calculated from the changed location to the new destination and is output to a user. In this way, dynamic, automatically changeable destination selection is performed which takes into account the actual course of a journey route.