Abstract: A method for transmitting a first data packet from a receiving input-buffer to a receiving output-buffer, the first data packet in the receiving input-buffer having a non-TSN format and the first data packet in the receiving output-buffer being TSN-compliant, includes the steps of: analysing the first data packet, which has been retrieved from a non-TSN device, in the receiving input-buffer; adding a first data packet time to the first data packet according to a Precision Time Protocol (PTP); adding a predefined first data packet priority level to the first data packet according to a Priority Code Point (PCP) of an 802.1Q tag; transmitting the first data packet to the receiving output-buffer; and sending the first data packet according to the first data packet priority level to a TSN-compliant device.

Abstract: A method for providing a controlling frontend for an operating device configured for operating a field device includes providing an operational frame, wherein the operational frame serves as a generic user interface and is based on a companion specification; reading a field device specification from a database, wherein the field device specification comprises a structured set of field device attributes, which are related to the operating elements; and generating, based on the field device specification and the operational frame, a structured set of display elements for the controlling frontend, wherein at least some of the display elements of the controlling frontend are connected to the operating elements of the field device.

Abstract: A system for enabling Time-Sensitive Networking (TSN)-stream configuration of a TSN network includes: a gathering device for gathering resource utilization information from TSN switches of the TSN-stream configuration as gathered resource utilization information; and a tool device for providing a TSN stream path calculation based on the gathered resource utilization information and allocating stream paths and establishing channel multiplexing in the TSN network based on the gathered resource utilization information.

Abstract: A method for securely supplying data to be used in parameterizing a device for an industrial automation system includes a first party supplying a second party with a machine-readable standardized container for the exchange of device parameters in industrial automation systems, wherein the supplying comprises writing into the container an encrypted primary security credential to be used by the device for establishing trust with the industrial automation system. In another aspect, a method for securely obtaining data to be used in parameterizing a device for an industrial automation system includes obtaining, from a first party, by a second party, a machine-readable standardized container for the exchange of device parameters in industrial automation systems, the container comprising an encrypted primary security credential to be used by the device for establishing trust with the industrial automation system.

Abstract: The present disclosure is directed at a façade server. The façade server provides a configurable façade having a configurable address space and serving as an interface for a client and to provide a mapping between the configurable address space of the façade and a data space and/or an address space of an external server.

Abstract: A system for enabling Time-Sensitive Networking (TSN)-stream configuration of a TSN network includes: a gathering device for gathering resource utilization information from TSN switches of the TSN-stream configuration as gathered resource utilization information; and a tool device for providing a TSN stream path calculation based on the gathered resource utilization information and allocating stream paths and establishing channel multiplexing in the TSN network based on the gathered resource utilization information.

Abstract: A method for transmitting a first data packet from a receiving input-buffer to a receiving output-buffer, the first data packet in the receiving input-buffer having a non-TSN format and the first data packet in the receiving output-buffer being TSN-compliant, includes the steps of: analysing the first data packet, which has been retrieved from a non-TSN device, in the receiving input-buffer; adding a first data packet time to the first data packet according to a Precision Time Protocol (PTP); adding a predefined first data packet priority level to the first data packet according to a Priority Code Point (PCP) of an 802.1Q tag; transmitting the first data packet to the receiving output-buffer; and sending the first data packet according to the first data packet priority level to a TSN-compliant device.

Abstract: A computer-implemented method for semantic-based planning, engineering, and commissioning a project in a building or home automation system, using multiple technologies/protocols of devices including sensors, actuators and control devices, the method being based on a semantic based model having an automatic configuration generation for specific technologies/protocols from a function-based device specification, the method including the following multiple transformation steps: calculating/creating a configuration for a specific protocol/technology using a mapping complex or structure of rules or processing instructions that takes into account the semantic-based model, technology models, heuristics, and/or technology constraints of the devices; generating an internal model of the building automation system with communication objects as an output of the automatic created configuration calculation; transforming the internal model, depending on a targeted technology/protocol, in order to create either application p

Abstract: A computer-implemented method for semantic-based planning, engineering, and commissioning a project in a building or home automation system, using multiple technologies/protocols of devices including sensors, actuators and control devices, the method being based on a semantic based model having an automatic configuration generation for specific technologies/protocols from a function-based device specification, the method including the following multiple transformation steps: calculating/creating a configuration for a specific protocol/technology using a mapping complex or structure of rules or processing instructions that takes into account the semantic-based model, technology models, heuristics, and/or technology constraints of the devices; generating an internal model of the building automation system with communication objects as an output of the automatic created configuration calculation; transforming the internal model, depending on a targeted technology/protocol, in order to create either application p

Abstract: A key distributer node for a network includes a memory device with at least one first key, at least one data communication device that can exchange data with first and second access nodes for a terminal integrated wirelessly into the network, at least one processor connected to the memory device and the data communication device, wherein functions are provided for the processor(s) that allow authentication of the terminal at the second access node in response to a key request received by the second access node, a derivation of a second key from the first key, and triggered transmission of the second key through the data communication device to the second access node. Connections to the network's first and second access nodes with security relationships can be provided for the key distributor node when using the first key.

Abstract: A method for controlling a physical unit, involving: cyclically generating a plurality of controlling outputs, wherein the plurality of controlling outputs is provided in a redundant manner; applying a selected one of the controlling outputs to the physical unit; checking if at least the selected controlling output is correct; and selecting one of the control units whose controlling output was checked as correct to apply its controlling output to the physical unit (2) in a subsequent cycle, wherein the applying the selected one of the controlling outputs to the physical unit is performed before or during the step of checking.

Abstract: A combination of a component-based automation framework, software-based redundancy patterns, and a distributed, reliable runtime manager, is able to detect host failures and to trigger a reconfiguration of the system at runtime. This combined solution maintains system operation in case a fault occurs and, in addition, automatically restores fault tolerance by using backup contingency plans, and without the need for operator intervention or immediate hardware replacement. A fault-tolerant fault tolerance mechanism is thus provided, which restores the original level of fault tolerance after a failure has occurred—automatically and immediately, i.e., without having to wait for a repair or replacement of the faulty entity. In short, the invention delivers increased availability or uptime of a system at reduced costs and complexity for an operator or engineer by adapting automatically to a new environment.

Abstract: A key distributor node for a network includes a memory device with at least one first key, at least one data communication device that can exchange data with first and second access nodes for a terminal integrated wirelessly into the network, at least one processor connected to the memory device and the data communication device, wherein functions are provided for the processor(s) that allow authentication of the terminal at the second access node in response to a key request received by the second access node, a derivation of a second key from the first key, and triggered transmission of the second key through the data communication device to the second access node. Connections to the network's first and second access nodes with security relationships can be provided for the key distributor node when using the first key.

Abstract: A key distributer node for a network includes a memory device with at least one first key, at least one data communication device that can exchange data with first and second access nodes for a terminal integrated wirelessly into the network, at least one processor connected to the memory device and the data communication device, wherein functions are provided for the processor(s) that allow authentication of the terminal at the second access node in response to a key request received by the second access node, a derivation of a second key from the first key, and triggered transmission of the second key through the data communication device to the second access node. Connections to the network's first and second access nodes with security relationships can be provided for the key distributor node when using the first key.

Abstract: Exemplary controllers in a system are associated with technical entities and are configured to selectively execute tasks in a primary mode when the controllers interact with the associated technical entities with respect to the tasks, and to execute tasks in a secondary mode when the controllers do not interact with the associated technical entities with respect to the task. The system distributes task instructions of a first task to a first controller that is configured to execute the first task in the primary mode, and to distribute the task instructions of the first task to a second controller that is configured to execute the first task in the secondary mode. The system distributes task instructions of a second task to the second controller that is configured to execute the second task in the primary mode.

Abstract: A combination of a component-based automation framework, software-based redundancy patterns, and a distributed, reliable runtime manager, is able to detect host failures and to trigger a reconfiguration of the system at runtime. This combined solution maintains system operation in case a fault occurs and, in addition, automatically restores fault tolerance by using backup contingency plans, and without the need for operator intervention or immediate hardware replacement. A fault-tolerant fault tolerance mechanism is thus provided, which restores the original level of fault tolerance after a failure has occurred—automatically and immediately, i.e., without having to wait for a repair or replacement of the faulty entity. In short, the invention delivers increased availability or uptime of a system at reduced costs and complexity for an operator or engineer by adapting automatically to a new environment.

Abstract: A method for controlling a physical unit, involving: cyclically generating a plurality of controlling outputs, wherein the plurality of controlling outputs is provided in a redundant manner; applying a selected one of the controlling outputs to the physical unit; checking if at least the selected controlling output is correct; and selecting one of the control units whose controlling output was checked as correct to apply its controlling output to the physical unit (2) in a subsequent cycle, wherein the applying the selected one of the controlling outputs to the physical unit is performed before or during the step of checking.

Abstract: A key distributer node for a network includes a memory device with at least one first key, at least one data communication device that can exchange data with first and second access nodes for a terminal integrated wirelessly into the network, at least one processor connected to the memory device and the data communication device, wherein functions are provided for the processor(s) that allow authentication of the terminal at the second access node in response to a key request received by the second access node, a derivation of a second key from the first key, and triggered transmission of the second key through the data communication device to the second access node. Connections to the network's first and second access nodes with security relationships can be provided for the key distributor node when using the first key.

Abstract: Exemplary controllers in a system are associated with technical entities and are configured to selectively execute tasks in a primary mode when the controllers interact with the associated technical entities with respect to the tasks, and to execute tasks in a secondary mode when the controllers do not interact with the associated technical entities with respect to the task. The system distributes task instructions of a first task to a first controller that is configured to execute the first task in the primary mode, and to distribute the task instructions of the first task to a second controller that is configured to execute the first task in the secondary mode. The system distributes task instructions of a second task to the second controller that is configured to execute the second task in the primary mode.

Abstract: A method for making safety mechanisms available in wireless mesh networks which have a plurality of nodes that are interconnected by multi-hop communication in a wireless network meshed by mesh routing in the MAC layer, every node being active as a router to forward the data traffic of the other nodes. At least two differentiated levels of confidence are defined by a type of protection (ToP) the value of which represents a specific level of confidence for the nodes and data packets, the data packets being labeled with a ToP value in the mesh header, and at least one ToP value being allocated to the participating nodes, the nodes forwarding the data packet in the mesh network using the ToP values of the node and of the data packet if this ToP value combination is admissible in the node.