Abstract: The present invention relates to a device for transferring exhaust gas between a front and rear carriage of a mobile working machine, in particular a dump truck, separated by an articulated pivot joint, which working machine has a pipe section, which is variable in it length, for conducting exhaust gas, a first flexible hose cooperating with a first end portion of the pipe section for introducing exhaust gas into the pipe section, and a second flexible hose cooperating with a second end portion of the pipe section for discharging exhaust gas from the pipe section. The device is characterized in that a first cardan shaft is provided in the first end portion, the distal end of which is configured to be rigidly attached to a fastening section of the front carriage or the rear carriage of the working machine, and a second cardan shaft is provided in the second end region.

Abstract: Techniques for configuring data protection settings for data of an industrial system or an electric power system are provided. The industrial system or the electric power system includes at least one gateway via which the data are transmitted to a computing resource for processing and/or storing. One or several privacy-preserving techniques to be applied to the data are automatically determined. The one or several privacy-preserving techniques being determined based on data privacy requirements for the data and processing operations to be performed on the data by the computing resource. The determined one or several privacy-preserving techniques are automatically applied.

Abstract: A method and system are provided for programming robots by operators without expertise in specialized robot programming languages. In the method, inputs are received from the operator generically describing a desired robot movement. The system then uses the operator inputs to translate the desired robot movement into software commands that direct the robot to perform the desired robot movement. The robot may then be programmed with the software commands and operated to perform the desired robot movement.

Abstract: A method and system are provided for programming robots by users without expertise in specialized robot programming languages. In the method, a high-level description is provided by the user to a translator. The translator translates the description into a transformation. A transformer applies the transformation to an existing robot trajectory in order to provide an updated robot trajectory. The updated robot trajectory is then used to operate the robot.

Abstract: A method and system are provided for training a robot to recognize objects in the workspace of the robot. Objects in the workspace are identified by the user, and the robot determines candidate objects. Feedback may be used in order for the user to confirm whether the candidate object determined by the robot system matches the object intended by the user. Gripping information for the object may also be identified by the user to train the robot how to grip the object.

Abstract: A method for evaluating data is based on a computational model, the computational model comprising model data, a training function and a prediction function. The method includes training the computational model by: receiving training data and training result data for training the computational model, and computing the model data from the training data and the training result data with the training function. The method includes predicting result data by: receiving field data for predicting result data; and computing the result data from the field data and the model data with the prediction function. The training data may be plaintext and the training result data may be encrypted with a homomorphic encryption algorithm, wherein the model data may be computed in encrypted form from the training data and the encrypted training result data with the training function.

Abstract: To commission an industrial automation control system, IACS, a computing device generates commands to automatically set or verify a security configuration of the IACS. The commands are generated by the computing device based on a machine-readable security baseline, and, optionally, based on a machine-readable configuration file of the IACS.

Abstract: A for ensuring grid stability by using a distributed ledger, the method comprising the steps: measuring metrics from a plurality of distributed energy resource, DER, wherein said metrics are related to grid stability; storing (a) said metrics/measurements in the distributed ledger; transferring said metrics from the distributed ledger into a smart contract (2); computing any deviations between said metrics and predetermined values stored in advance in the smart contract (2) by executing the smart contract; transferring and storing results from the computing step in the distributed ledger; and transferring said results from the distributed ledger to the respective DER of the plurality of DERs, wherein said DER receives positive or negative values which regulates the amount of contribution to the grid.

Abstract: An aspect of the present disclosure relates to a method for providing a data structure comprising a refined energy schedule, the method comprising receiving a plurality of energy demand requests, energy storage offers, and/or energy supply offers from a plurality of participants of a power network; determining by a plurality of distributed computational units the refined energy schedule, using an optimization function, under consideration of the plurality of energy demand requests, energy storage offers, and/or energy supply offers, wherein the refined energy schedule is an at least substantially optimal energy schedule; and appending the refined energy schedule to the data structure. A further aspect of the disclosure relates to a data structure, in particular to the data structure provided in the method.

Abstract: A method for adjusting electrical energy flow schedules of a utility handling a plurality of distributed energy resources. The method comprising the steps of providing information regarding energy flow of the energy resources and storing said information on a distributed ledger; transferring energy schedules from the utility to the distributed ledger; transferring said information regarding the energy flow and the energy schedules from the distributed ledger to a computing means and computing proposed corrections for the energy schedules; transferring said proposed correction to the distributed ledger; transferring said proposed correction to the utility which decides to use or not to use the proposed correction. By deciding to use the proposed correction, the schedules are corrected and information is transferred from the utility to the computing means.

Abstract: To facilitate storage of data from plural data sources of an industrial automation control system, power distribution system or power generation system, a decision making device executes a machine learning algorithm to determine a compression technique in dependence on the data source from which data originates.

Abstract: A distributed ledger arrangement for supporting service transactions in an industrial system includes: a plurality of nodes of a network, each configured to maintain a distributed ledger copy; a plurality of machine-to-ledger interfaces, each configured to receive, from a device acting as service provider and/or service consumer in the industrial system, service condition inquiries and requests to record transactions; and one or more manager-to-ledger interfaces, each configured to receive, from a device owner authorized to specify service conditions with effect on the devices, requests to record service conditions.

Abstract: A method for controlling a device includes: sending a command signed by an operator's signature to a server; verifying, in the server, that the operator is authenticated to transmit the command; assigning, in the server, a criticality level and an authorization level to the command; depending on the criticality level and the authorization level, sending an approval request relating to the command to at least one control user; approving or denying the approval request by at least a subset of the at least one control user; sending the denied or approved approval request back to the server; determining, in the server, whether the command was approved by sufficiently many control users based on the criticality level and the authorization level; and sending the command to the device for being carried out by the device in case the command was approved by sufficiently many control users, wherein at last one of the at least one control user and the operator is remote from each other.

Abstract: Techniques for configuring data protection settings for data of an industrial system or an electric power system (20) are provided. The industrial system or the electric power system (20) comprises at least one gateway (24) via which the data are transmitted to a computing resource (25) for processing and/or storing. One or several privacy-preserving techniques to be applied to the data are automatically determined. The one or several privacy-preserving techniques being determined based on data privacy requirements for the data and processing operations to be performed on the data by the computing resource (25). The determined one or several privacy-preserving techniques are automatically applied.

Abstract: The present invention provides an approach for granting access and respectively denying access to an instruction set of a device. The technical teaching provides the advantage that unauthorized access can be effectively prevented. Hence, maintenance work can be performed by specialized staff and security sensitive parts of the instruction sets are secured.

Abstract: The application relates to a method for computing a probabilistic encryption scheme for encrypting a data item in an electronic device including: computing a plurality of random bit strings in a computation cluster; sending the computed plurality of random strings to the electronic device; generating a random string (rE) for using in the encryption scheme in the electronic device using a subset of the plurality of the random strings computed in the computation cluster and encrypting the data item using the random string computed in the electronic device. The present application also relates to a corresponding system and corresponding computer program product including one or more computer readable media having computer executable instructions for performing the steps of the method.

Abstract: A method for automatically improving security of a network system includes: collecting security relevant information from network devices of the network system, the security relevant information including security settings and operational information of the network devices; analyzing the security relevant information for determining weak security settings of a network device, the weak security settings being not necessary for a regular operation of the network system; determining hardened security settings for the network devices based on the weak security settings, the hardened security settings restricting a possible operation of the network device but allow a regular operation of the network system; and applying the hardened security settings to the network device.

Abstract: The present invention discloses a method for computing a secret value including a first secret using a function including an operation, comprising: computing, by a host, a first encrypted value of the first secret with a first key; sending, by the host, the first encrypted value to a value holder and the first key to a key holder, wherein the value holder and the key holder are independently trusted by the host; computing, by the value holder, a computed encrypted value from the first encrypted value using the function; and computing, by the key holder, a computed key from the first key using the function.

Abstract: The present invention generally relates to a context-aware security self-assessment method or module that determines the context in which the device is used and based on this, assesses the devices security settings. The context may refer to the system environment, the applications the device is used for, and/or the current life-cycle stage of the device, without being limited to said contexts. The method of the present invention preferably prioritizes and rates the security relevant findings and presents them in combination with mitigation options through a web interface, a configuration tool, or through notifications in the control system.

Abstract: Mechanical condition monitoring of robots can be used to detect unexpected failure of robots. Data taken from a robot operation is processed and compared against a health baseline. Features extracted during the monitoring stage of robot operation are aligned with features extracted during the training stage in which the health baseline is established by projecting both onto a common subspace. A classifier which can include a distance assessment such as an L2-norm is used within the common subspace to assess the condition of the robot. Excursions of the distance assessment from a criteria indicate a failure or potential failure.