Abstract: A method for performing a technical process in which application programs are executed redundantly in a plurality N of computing instances and, on the basis of an MooN system, wherein M is at least two and N is at least three, a comparison of the plurality N of results of the redundant execution of the application programs is performed in a voting. When a minority of the results is different from a majority of the results with identical content, the minority is excluded during the performance of the technical process, is repaired with a state copy of one of the intact computing instances and reintegrated into the process. There is also described a computer program product and a provisioning apparatus.

Abstract: A method performs a computer-assisted creation of a test algorithm for processing applications in a computing environment for executing a large number of application programs, by taking into account configuration data for the application programs. For each application program, a data segment is formed and the configuration data referring to the relevant application program is combined as a data segment. The data segments are combined in a data set. A global ID code is assigned to the data set. Participating components of the computing environment are identified, and an ID code assigned to them. A hash function is applied to each of the data segments contained in the data set. A calculation function is applied to each data segment in that the ID codes, the hash value of the relevant data segment and the global ID code are linked together by computational operators.

Abstract: A railway automation network includes a publish/subscribe system with at least one transmitter-end application, at least one transmitter-end message broker, at least one receiver-end message broker and at least one receiver-end application. The at least one transmitter-end message broker is configured to map a message published by the transmitter-end application or one of the transmitter-end applications onto at least two redundant, at least partially physically independent network paths of the railway automation network on the basis of a subject specified in the message. The railway automation network is configured to transmit the message to the receiver-end message broker or at least one of the receiver-end message brokers simultaneously over the at least two network paths. The receiver-end message broker is configured to transmit the message to the at least one receiver-end application. A method for transmitting messages in a railway automation network is also provided.

Abstract: A method performs a computer-assisted creation of a test algorithm for processing applications in a computing environment for executing a large number of application programs, by taking into account configuration data for the application programs. For each application program, a data segment is formed and the configuration data referring to the relevant application program is combined as a data segment. The data segments are combined in a data set. A global ID code is assigned to the data set. Participating components of the computing environment are identified, and an ID code assigned to them. A hash function is applied to each of the data segments contained in the data set. A calculation function is applied to each data segment in that the ID codes, the hash value of the relevant data segment and the global ID code are linked together by computational operators.

Abstract: An arrangement for redundant data processing has an integrated circuit in which the functionality of a multi-core processor is implemented. Processor cores (40; 50) of the multi-core processor are each designed to execute a useful program. The results which emerge from the execution of the useful program by the different processor cores are compared by a comparison module of the arrangement. The processor cores differ from one another with respect to an address or data structure (AS1, AS2; DS1, DS2) which is used by a processor core to respectively store and read data in or from a memory area (70; 80) that is assigned to the particular processor core. In terms of hardware, the individual processor cores are at least partially implemented separately in the integrated circuit.

Abstract: A method synchronizes the operation of a plurality of multicore processors. A first and a second multicore processor each have a main processor core and at least one secondary processor core that is used for executing utility programs. Only the main processor cores of the various multicore processors synchronize to one another. The at least one secondary processor core is controlled by the respective main processor core in each multicore processor. The utility programs are processed by the at least one secondary processor core and outputs are generated that are made available to the respective main processor core of the same multicore processor. Outputs from the multiplicity of multicore processors are then output in sync by the respective main processor core.

Abstract: A system, in particular for controlling signal towers in rail traffic, includes at least a plurality of redundant replicants for generating redundant control signals. A voter structure having a plurality of majority voters is also provided. Each majority voter has a respective output and inputs that are connected to the outputs of the plurality of redundant replicants. The voter structure and the plurality of redundant replicants are separated from one another in terms of hardware, the outputs of the plurality of majority voters are connected to the inputs of a discriminator voter and the output of the discriminator voter provides a control signal, in particular for controlling signal towers. The discriminator voter only emits a control signal when the inputs thereof are not at variance.

Abstract: An arrangement provides secure electronic data communication according to the publish/subscribe model between information-processing units of the arrangement. The data communication is secured on the basis of an asymmetric encryption method. Each of the information-processing units is associated with a hardware-type secured zone in which the respective information-processing unit is arranged. A zone key pair containing a public zone key and a secret zone key is associated with each of the zones. Each of the zones contains an encryption unit embodied as a hardware module, which is configured to store the secret zone key in a secure manner and to perform cryptographic operations by use of the secret zone key.

Abstract: A method exchanges messages with different security classes between security-relevant devices. Key pairs containing a private key and a public key corresponding to the private key are assigned to each security class, wherein the keys and key pairs of each security class differ from each other. Each security-relevant device has all the public keys for decrypting messages for each security class and the relevant private keys for encrypting messages corresponding to a security class that is lower than or equal to the security class of the security-relevant device. Upon receipt, the security class for the message is identified by decryption by use of the public key.

Abstract: A method synchronizes the operation of a plurality of multicore processors. A first and a second multicore processor each have a main processor core and at least one secondary processor core that is used for executing utility programs. Only the main processor cores of the various multicore processors synchronize to one another. The at least one secondary processor core is controlled by the respective main processor core in each multicore processor. The utility programs are processed by the at least one secondary processor core and outputs are generated that are made available to the respective main processor core of the same multicore processor. Outputs from the multiplicity of multicore processors are then output in sync by the respective main processor core.

Abstract: A railway automation network includes a publish/subscribe system with at least one transmitter-end application, at least one transmitter-end message broker, at least one receiver-end message broker and at least one receiver-end application. The at least one transmitter-end message broker is configured to map a message published by the transmitter-end application or one of the transmitter-end applications onto at least two redundant, at least partially physically independent network paths of the railway automation network on the basis of a subject specified in the message. The railway automation network is configured to transmit the message to the receiver-end message broker or at least one of the receiver-end message brokers simultaneously over the at least two network paths. The receiver-end message broker is configured to transmit the message to the at least one receiver-end application. A method for transmitting messages in a railway automation network is also provided.

Abstract: In a method for voting using concatenated signatures, a plurality M of replicants for generating M redundant messages, where M?2, and a plurality N of voter modules, where N?2, are provided. Each voter module has a voter for voting the redundant messages and a crypto unit with a private key fragment for signing a message. The redundant messages of the replicants are transmitted to each voter module, so that the voter of each voter module generates a voted message on the basis of the redundant messages. N private key fragments are used to generate signatures for the voted messages that are checked by a public key of a reception unit. In the event of a successful check, the repeatedly voted message is accepted.

Abstract: An arrangement for redundant data processing has an integrated circuit in which the functionality of a multi-core processor is implemented. Processor cores (40; 50) of the multi-core processor are each designed to execute a useful program. The results which emerge from the execution of the useful program by the different processor cores are compared by a comparison module of the arrangement. The processor cores differ from one another with respect to an address or data structure (AS1, AS2; DS1, DS2) which is used by a processor core to respectively store and read data in or from a memory area (70; 80) that is assigned to the particular processor core. In terms of hardware, the individual processor cores are at least partially implemented separately in the integrated circuit.

Abstract: A method exchanges messages with different security classes between security-relevant devices. Key pairs containing a private key and a public key corresponding to the private key are assigned to each security class, wherein the keys and key pairs of each security class differ from each other. Each security-relevant device has all the public keys for decrypting messages for each security class and the relevant private keys for encrypting messages corresponding to a security class that is lower than or equal to the security class of the security-relevant device. Upon receipt, the security class for the message is identified by decryption by use of the public key.

Abstract: In a method for voting using concatenated signatures, a plurality M of replicants for generating M redundant messages, where M?2, and a plurality N of voter modules, where N?2, are provided. Each voter module has a voter for voting the redundant messages and a crypto unit with a private key fragment for signing a message. The redundant messages of the replicants are transmitted to each voter module, so that the voter of each voter module generates a voted message on the basis of the redundant messages. N private key fragments are used to generate signatures for the voted messages that are checked by a public key of a reception unit. In the event of a successful check, the repeatedly voted message is accepted.

Abstract: A system, in particular for controlling signal towers in rail traffic, includes at least a plurality of redundant replicants for generating redundant control signals. A voter structure having a plurality of majority voters is also provided. Each majority voter has a respective output and inputs that are connected to the outputs of the plurality of redundant replicants. The voter structure and the plurality of redundant replicants are separated from one another in terms of hardware, the outputs of the plurality of majority voters are connected to the inputs of a discriminator voter and the output of the discriminator voter provides a control signal, in particular for controlling signal towers. The discriminator voter only emits a control signal when the inputs thereof are not at variance.

Abstract: An incorrect representation of image data on a display unit is detected with the novel method. In order to enable prompt and particularly reliable detection of an incorrect representation of image data on the display unit, the image data to be displayed are transmitted to the display unit, test data are acquired by electronically detecting at least part of the image represented on the display unit, and an incorrect representation of the image data on the display unit is determined by electronically evaluating at least part of the detected test data. A device for detecting an incorrect representation of image data on a display unit makes use of the novel method.