Abstract: In a method for computer-assisted operation of a memory unit, encoded data is saved in the memory unit. The data is retrieved and decoded after retrieval. The memory unit is monitored for errors in that a temporal sequence of computer-assisted checking operations is carried out for the memory unit. For first-time encoding of the data, each required application data set is generated or selected, containing check data segments. For each application data set, the check data segment is occupied by count data, which characterizes the checking operation being implemented. After retrieving and decoding the application data sets, an error is determined when the count data characterizes neither the checking operation being implemented nor the most recent completely implemented checking operation. The check data segment of the relevant application data set is occupied by count data, which characterizes the checking operation being implemented, if no error was determined.

Abstract: In a method for computer-assisted operation of a memory unit, data is saved in the memory unit and the data is encoded before saving, or data is retrieved from the memory unit and the data is decoded after retrieval. For first-time encoding of the data, at least one group of application data sets, containing data segments having identical application data for an application program and check data segments having different diversity characteristic data respectively, is generated or selected from a supply of possible diversity characteristic data. Each application data set is encoded and saved. The data is retrieved in that the application data sets are retrieved and decoded. Data is saved in that the application data sets are encoded and saved. Furthermore, a method for computer-assisted, repeated execution of an application program in redundant computing instances, a computer program product and a provision apparatus are disclosed.

Abstract: In a method for computer-assisted operation of a memory unit, encoded data is saved in the memory unit. The data is retrieved and decoded after retrieval. The memory unit is monitored for errors in that a temporal sequence of computer-assisted checking operations is carried out for the memory unit. For first-time encoding of the data, each required application data set is generated or selected, containing check data segments. For each application data set, the check data segment is occupied by count data, which characterizes the checking operation being implemented. After retrieving and decoding the application data sets, an error is determined when the count data characterizes neither the checking operation being implemented nor the most recent completely implemented checking operation. The check data segment of the relevant application data set is occupied by count data, which characterizes the checking operation being implemented, if no error was determined.

Abstract: A method performs a computer-assisted creation of a test algorithm for processing applications in a computing environment for executing a large number of application programs, by taking into account configuration data for the application programs. For each application program, a data segment is formed and the configuration data referring to the relevant application program is combined as a data segment. The data segments are combined in a data set. A global ID code is assigned to the data set. Participating components of the computing environment are identified, and an ID code assigned to them. A hash function is applied to each of the data segments contained in the data set. A calculation function is applied to each data segment in that the ID codes, the hash value of the relevant data segment and the global ID code are linked together by computational operators.

Abstract: A method for determining a measurement variable of particles in an aerosol, the method including feeding at least one sample of the aerosol to a measuring device of a measuring apparatus; determining a particle distribution specific information; determining a particle loss from the particle distribution specific information; and correcting a measurement value of the measurement variable as a function of the particle loss.

Abstract: An arrangement for redundant data processing has an integrated circuit in which the functionality of a multi-core processor is implemented. Processor cores (40; 50) of the multi-core processor are each designed to execute a useful program. The results which emerge from the execution of the useful program by the different processor cores are compared by a comparison module of the arrangement. The processor cores differ from one another with respect to an address or data structure (AS1, AS2; DS1, DS2) which is used by a processor core to respectively store and read data in or from a memory area (70; 80) that is assigned to the particular processor core. In terms of hardware, the individual processor cores are at least partially implemented separately in the integrated circuit.

Abstract: A system, in particular for controlling signal towers in rail traffic, includes at least a plurality of redundant replicants for generating redundant control signals. A voter structure having a plurality of majority voters is also provided. Each majority voter has a respective output and inputs that are connected to the outputs of the plurality of redundant replicants. The voter structure and the plurality of redundant replicants are separated from one another in terms of hardware, the outputs of the plurality of majority voters are connected to the inputs of a discriminator voter and the output of the discriminator voter provides a control signal, in particular for controlling signal towers. The discriminator voter only emits a control signal when the inputs thereof are not at variance.

Abstract: An arrangement provides secure electronic data communication according to the publish/subscribe model between information-processing units of the arrangement. The data communication is secured on the basis of an asymmetric encryption method. Each of the information-processing units is associated with a hardware-type secured zone in which the respective information-processing unit is arranged. A zone key pair containing a public zone key and a secret zone key is associated with each of the zones. Each of the zones contains an encryption unit embodied as a hardware module, which is configured to store the secret zone key in a secure manner and to perform cryptographic operations by use of the secret zone key.

Abstract: A method exchanges messages with different security classes between security-relevant devices. Key pairs containing a private key and a public key corresponding to the private key are assigned to each security class, wherein the keys and key pairs of each security class differ from each other. Each security-relevant device has all the public keys for decrypting messages for each security class and the relevant private keys for encrypting messages corresponding to a security class that is lower than or equal to the security class of the security-relevant device. Upon receipt, the security class for the message is identified by decryption by use of the public key.

Abstract: A railway automation network includes a publish/subscribe system with at least one transmitter-end application, at least one transmitter-end message broker, at least one receiver-end message broker and at least one receiver-end application. The at least one transmitter-end message broker is configured to map a message published by the transmitter-end application or one of the transmitter-end applications onto at least two redundant, at least partially physically independent network paths of the railway automation network on the basis of a subject specified in the message. The railway automation network is configured to transmit the message to the receiver-end message broker or at least one of the receiver-end message brokers simultaneously over the at least two network paths. The receiver-end message broker is configured to transmit the message to the at least one receiver-end application. A method for transmitting messages in a railway automation network is also provided.

Abstract: In a method for voting using concatenated signatures, a plurality M of replicants for generating M redundant messages, where M?2, and a plurality N of voter modules, where N?2, are provided. Each voter module has a voter for voting the redundant messages and a crypto unit with a private key fragment for signing a message. The redundant messages of the replicants are transmitted to each voter module, so that the voter of each voter module generates a voted message on the basis of the redundant messages. N private key fragments are used to generate signatures for the voted messages that are checked by a public key of a reception unit. In the event of a successful check, the repeatedly voted message is accepted.

Abstract: An arrangement for redundant data processing has an integrated circuit in which the functionality of a multi-core processor is implemented. Processor cores (40; 50) of the multi-core processor are each designed to execute a useful program. The results which emerge from the execution of the useful program by the different processor cores are compared by a comparison module of the arrangement. The processor cores differ from one another with respect to an address or data structure (AS1, AS2; DS1, DS2) which is used by a processor core to respectively store and read data in or from a memory area (70; 80) that is assigned to the particular processor core. In terms of hardware, the individual processor cores are at least partially implemented separately in the integrated circuit.

Abstract: A method exchanges messages with different security classes between security-relevant devices. Key pairs containing a private key and a public key corresponding to the private key are assigned to each security class, wherein the keys and key pairs of each security class differ from each other. Each security-relevant device has all the public keys for decrypting messages for each security class and the relevant private keys for encrypting messages corresponding to a security class that is lower than or equal to the security class of the security-relevant device. Upon receipt, the security class for the message is identified by decryption by use of the public key.

Abstract: In a method for voting using concatenated signatures, a plurality M of replicants for generating M redundant messages, where M?2, and a plurality N of voter modules, where N?2, are provided. Each voter module has a voter for voting the redundant messages and a crypto unit with a private key fragment for signing a message. The redundant messages of the replicants are transmitted to each voter module, so that the voter of each voter module generates a voted message on the basis of the redundant messages. N private key fragments are used to generate signatures for the voted messages that are checked by a public key of a reception unit. In the event of a successful check, the repeatedly voted message is accepted.

Abstract: A system, in particular for controlling signal towers in rail traffic, includes at least a plurality of redundant replicants for generating redundant control signals. A voter structure having a plurality of majority voters is also provided. Each majority voter has a respective output and inputs that are connected to the outputs of the plurality of redundant replicants. The voter structure and the plurality of redundant replicants are separated from one another in terms of hardware, the outputs of the plurality of majority voters are connected to the inputs of a discriminator voter and the output of the discriminator voter provides a control signal, in particular for controlling signal towers. The discriminator voter only emits a control signal when the inputs thereof are not at variance.

Abstract: A method and a protection system for signaling protection of rail vehicles connected to at least one central monitoring facility through a data radio system. In order to eliminate cost-intensive and highly complicated protection technology, the vehicles convey instantaneous position data through the data radio system to the monitoring facility. A safety area is defined around each of the vehicles. The safety area depends on a vehicle speed and a measured value scatter of the positional data collection method being used. A warning area surrounds the safety area and the monitoring facility determines movement-defining data through the vehicle-specific position data, safety areas and warning areas. In order to avoid collision-related overlaps of safety zones and to counteract collision-related overlaps of warning areas, the movement-defining data are transmitted to the affected vehicles by way of the data radio system in the event of collision-relevant overlaps.