Abstract: A system and method for providing time-critical services that are each assigned at least one server component formed by a software container which is loadable into a process control environment and which is executable at the process control environment, wherein a virtual IP stack is provided for each server component, which is connected to a virtual switch comprised by the process control environment, where each service additionally comprises a directory service component for determining services provided within the process control environment, where the directory service components are interconnected via a communication interface which is separated from the virtual switch and from the virtual IP stacks of the server components, and where an aggregator component formed via an additional software container is connected to the separated communication interface, where the aggregator component makes available, outside of the process control environment, reconciled information regarding the services provided via t

Abstract: Method and system for providing time-critical services via a flow control environment, wherein at least one respective server component is provided for each service, wherein the server component is formed by a flow control component that is loadable into the flow control environment and executed there, where a configuration unit for at least one gateway component of a subnetwork forming the flow control environment ascertains globally valid access information associated with respective addressing information of the server components that is valid within the subnetwork, based on a mode of operation predefined via the configuration unit, one or more gateway components connected in parallel and/or in series are used, and where the at least one gateway component forwards service access requests to the server components in accordance with the forwarding and/or filter rules and the mode of operation.

Abstract: Automation system, apparatus and method for coupling a device network and a communication network, wherein the system verifies addressing of components in an automation system having a hyper-convergent infrastructure, where a gateway extends data telegrams to include a device-specific signature if such a signature cannot be implemented by the automation device of the automation system itself.

Abstract: A method for securely executing control applications via software-implemented containers which are each loadable into a container runtime environment set up on a host and are executable there, wherein a check component of the respective host calculates a respective check identifier via host-specific features and via features of the respective control application, where the check identifier and an initial application certificate of the control application are communicated to a registration component, the registration component verifies the check identifier and the initial application certificate and, in cases of a positive verification result, creates a device configuration certificate and an application instance certificate and communicates them to the host, linking of the application instance certificate with the control application is authorized via the device configuration certificate, and where execution of the container providing the control application on the host is authorized by the application instan

Abstract: Method and system for providing time-critical services via a flow control environment, wherein at least one respective server component is provided for each service, wherein the server component is formed by a flow control component that is loadable into the flow control environment and executed there, where a configuration unit for at least one gateway component of a subnetwork forming the flow control environment ascertains globally valid access information associated with respective addressing information of the server components that is valid within the subnetwork, based on a mode of operation predefined via the configuration unit, one or more gateway components connected in parallel and/or in series are used, and where the at least one gateway component forwards service access requests to the server components in accordance with the forwarding and/or filter rules and the mode of operation.

Abstract: A system and method for providing time-critical services that are each assigned at least one server component formed by a software container which is loadable into a process control environment and which is executable at the process control environment, wherein a virtual IP stack is provided for each server component, which is connected to a virtual switch comprised by the process control environment, where each service additionally comprises a directory service component for determining services provided within the process control environment, where the directory service components are interconnected via a communication interface which is separated from the virtual switch and from the virtual IP stacks of the server components, and where an aggregator component formed via an additional software container is connected to the separated communication interface, where the aggregator component makes available, outside of the process control environment, reconciled information regarding the services provided via t

Abstract: A method of adding a first publisher to a security group includes receiving a key request for keys for the first publisher, wherein the key request has at least one credential associated with the first publisher and a key parameter index indicative of a bandwidth of the first publisher, includes modifying a lifetime value of the at least one key of the security group based on the key parameter index of the received key request, wherein an expiry of the at least one key is based on the lifetime value of the one or more keys; and includes transmitting the at least one key and the modified lifetime value of the at least one key to the first publisher, where the first publisher is configured to publish at least one message encrypted using the at least one key, prior to expiry of the at least one key.

Abstract: Automation device, computer program, computer-readable medium and method for automatically configuring an automation device, wherein a) an automation device is provided, b) a device management unit monitors whether an automation identifier is assigned to the automation device, c) upon identifying an assignment of this kind, the device management unit queries a central cluster management unit to determine whether a description object, in which the automation identifier assigned to the automation device is stored, already exists in a cluster state database belonging to the cluster containing description objects for nodes of the cluster, d) if no such description object yet exists, or if such a description object does exist but has been declared inactive, then the device management unit creates, in the cluster state database for a node identifier assigned to the automation device, a description object in which the automation identifier assigned to the automation device is stored.

Abstract: A system, computer program, computer-readable medium and method for providing a redundant relay, particularly routing function in a network, wherein a superordinate subnetwork is connected to a subordinate subnetwork via redundant relays, particularly routers, a maximum of one of the redundant relays is operated in an active mode at any one time, while the remaining relay(s) are in standby mode, each redundant relay forms a relay redundancy module for controlling the relay mode and a DHCPv6 client for processing a prefix delegation, particularly in accordance with RFC 3633, and the redundant relays each include a relay control module, to which the relay redundancy module of the particular relay signals the current relay mode, and the relay control module of the active relay synchronizes a virtual DUID of its DHCPv6 client and/or a prefix delegated to the active relay to the (or each) relay in standby mode.

Abstract: A method for providing topology information, use of a name service server, a device, a computer program, a computer-readable medium and a method for configuring a device to be named within an industrial network, wherein a) the device to be named receives a neighbouring name message from a neighbouring device, b) a self-naming module creates a topological neighbouring domain name based on the neighbouring name message, c) the self-naming module transmits the topological neighbouring domain name to a name service server, d) the self-naming module receives from the name service server a response message, which includes at least one device name of the device to be named belonging to the topological neighbouring domain name, and e) at least one device name from the response message is assigned to the device to be named and this name is stored as the device name by the self-naming module.

Abstract: A system for data transmission between a client device, a server device and a plurality of automation devices, wherein the server device includes a descriptive representation of each of the plurality of automation devices, wherein the server device includes a server instance, which server instance is configured to load one of the descriptive representations based on a hostname identifying one of the plurality of automation devices, and wherein the server instance is configured to transmit data from the automation device to a client application on the client device based on the loaded descriptive representation of the automation device.

Abstract: The invention relates to a method for configuring an industrial real-time-capable communications network for the cyclical transmitting of messages (NWM), each comprising one or more data sets (DS1, . . . , DS4). The communications network (1) comprises a message source (10) for generating and cyclically sending the messages (NWM), at least one message sink (16, 17, 18) for receiving and processing the messages (NWM), as well as at least one network component (12, 14) which forwards messages (NWM) from the message source to the message sinks. The configuring comprises determining (S1) a network topology of the communications network (1) for the transmitting of a data stream to be sent from the message source (10) in the future, in which the messages (NWM) are each cyclically sent with all data sets. It is determined (S2) which of the data sets in the data stream a respective one of the message sinks wants to receive.

Abstract: A method for establishing a stream in a Time-Sensitive Networking (TSN) network, wherein a request message is sent by a stream subscriber to a Domain Name System (DNS) server, upon which entries are stored that each comprise a stream identifier of a first type assigned to a stream, and a stream identifier of a second type that is different from the first type and is assigned to the respective stream, and the specification of a predefined type exclusively used for, or forms these types of entries, where the request message comprises a stream identifier of the first type and the predefined type known to the at least one stream subscriber, where the stream subscriber receives a response message from the DNS server, which contains a stream identifier of the second type belonging to the stream, and where the stream subscriber logs on to the stream using the stream identifier obtained.

Abstract: Coordinator and method for providing control applications via a communication network, wherein prior to migrating a flow control component of a control application to a server device, a coordinator checks whether a data stream for transmitting application data was set up for the control application, where the coordinator enables migration of the flow control component if a data stream has not been set up, in the event a data stream had been set up previously, a check is performed to determine whether sufficient resources for data transmission are available for paths to the server device, such that if sufficient resources are unavailable, migration of the respective flow control component is stopped, and if sufficient resources are available, the coordinator prompts set-up of the data stream to the server device and disconnection of the previously set-up data stream and enables migration of the flow control component to the server device.

Abstract: A method for configuring at least one OPC UA PubSub subscriber in an in particular industrial network, in which a) a virtual address space is provided for the at least one subscriber on a configuration module that is separate from the at least one subscriber, b) a configuration for the at least one subscriber is performed and/or a configuration already existing for the at least one subscriber is changed in the virtual address space of the at least one subscriber, c) the configuration module converts the configuration and/or configuration change into at least one PubSub message, d) the at least one PubSub message is transmitted to the at least one subscriber, and e) the at least one subscriber is configured according to the at least one PubSub message. In addition, the invention relates to an automation system, a computer program and a computer-readable medium.

Abstract: A control method, device, computer program and a computer-readable medium and method for data communication in an industrial network, wherein a stream is created between at least two stream subscribers, where resources are reserved on at least one node point, particularly bridges and/or switches between the at least two stream subscribers, and subsequently data is transmitted between the at least two stream subscribers, via the stream, and at least one subscriber of the stream interrupts the emittance and/or reception of data via the stream and resources that are reserved on at least one node point for the at least one subscriber of the stream are released for use for a data transmission that is lower priority than the data transmission via the stream, and where the reservation of the resources being maintained for the at least one subscriber.

Abstract: A method for automatic address configuration, router, computer program, computer-readable medium and method for automatically configuring a router that has an upstream interface, connected or connectable to a higher-level subnetwork and/or a higher-level router, and a downstream interface, connected or connectable to a lower-level subnetwork, wherein whether the router receives, on the upstream interface, messages providing notification of at least one domain as part of a DNS search list option, is monitored and, if the message is not received over a prescribed period, a DNS island mode is automatically activated in which the DNS zone of a local DNS server of the router is configured using a predefined island domain, and a transmission module of the router is prompted to send a message via the downstream interface, which message includes the preconfigured island domain as part of a DNS search list option, preferably an address of the downstream interface.

Abstract: The invention describes a transmission device having a (TCP/IP) protocol stack (S, S?), which is designed for the transmission of data (D) in a time-sensitive network (TSN). The transmission device comprises at least one TSN-compliant virtual Ethernet interface (2.2, 2.2?) and an associated TSN control unit (3.1, 3.1?). The at least one TSN-compliant virtual Ethernet interface (2.2, 2.2?) is designed to send and/or receive a TSN-compliant data stream (2.1, 2.1?) in a physical layer (1) of the TCP/IP protocol stack (S, S?). The TSN-compliant data stream (2.1, 2.1?) can be configured and/or parameterised by means of the associated TSN control unit (3.1, 3.1?).

Abstract: Coordinator and method for providing control applications via a communication network, wherein prior to migrating a flow control component of a control application to a server device, a coordinator checks whether a data stream for transmitting application data was set up for the control application, where the coordinator enables migration of the flow control component if a data stream has not been set up, in the event a data stream had been set up previously, a check is performed to determine whether sufficient resources for data transmission are available for paths to the server device, such that if sufficient resources are unavailable, migration of the respective flow control component is stopped, and if sufficient resources are available, the coordinator prompts set-up of the data stream to the server device and disconnection of the previously set-up data stream and enables migration of the flow control component to the server device.

Abstract: Automation device, computer program, computer-readable medium and method for automatically configuring an automation device, wherein a) an automation device is provided, b) a device management unit monitors whether an automation identifier is assigned to the automation device, c) upon identifying an assignment of this kind, the device management unit queries a central cluster management unit to determine whether a description object, in which the automation identifier assigned to the automation device is stored, already exists in a cluster state database belonging to the cluster containing description objects for nodes of the cluster, d) if no such description object yet exists, or if such a description object does exist but has been declared inactive, then the device management unit creates, in the cluster state database for a node identifier assigned to the automation device, a description object in which the automation identifier assigned to the automation device is stored.