公开(公告)号：US08620873B2

公开(公告)日：2013-12-31

申请号：US12808370

申请日：2008-11-12

申请人： Efthimios Liakos ,  Roland Porsch ,  Stefan Rothbauer ,  Martin Rothfelder ,  Michael Zanzinger ,  Hartmut Zeilmann

发明人： Efthimios Liakos ,  Roland Porsch ,  Stefan Rothbauer ,  Martin Rothfelder ,  Michael Zanzinger ,  Hartmut Zeilmann

IPC分类号： G06F17/00 ,  G06F7/00

CPC分类号： G06F11/3608

摘要： At least one embodiment of the present invention relates to supporting a safety-oriented system, with the safety-oriented system including safety-critical software components and non-safety-critical software components. In this method, a possibility of a safety-critical software component and a non-safety-critical software component influencing each other is identified and a set of technical measures for preventing the possibility of influencing is defined. In this way, an absence of feedback from non-safety-critical software components to safety-critical software components is both verified and also ensured by at least one embodiment of the present invention.

摘要翻译： 本发明的至少一个实施例涉及支持面向安全的系统，其中安全性系统包括安全关键的软件组件和非安全关键的软件组件。 在这种方法中，确定了安全关键软件组件和非安全关键软件组件相互影响的可能性，并定义了一套防止影响可能性的技术措施。 以这种方式，通过本发明的至少一个实施例来验证并且也确保了从非安全关键软件组件到安全关键软件组件的反馈。

公开(公告)号：US20100313075A1

公开(公告)日：2010-12-09

申请号：US12808370

申请日：2008-11-12

申请人： Efthimios Liakos ,  Roland Porsch ,  Stefan Rothbauer ,  Martin Rothfelder ,  Michael Zanzinger ,  Hartmut Zeilmann

发明人： Efthimios Liakos ,  Roland Porsch ,  Stefan Rothbauer ,  Martin Rothfelder ,  Michael Zanzinger ,  Hartmut Zeilmann

IPC分类号： G06F11/36

CPC分类号： G06F11/3608

摘要： At least one embodiment of the present invention relates to supporting a safety-oriented system, with the safety-oriented system including safety-critical software components and non-safety-critical software components. In this method, a possibility of a safety-critical software component and a non-safety-critical software component influencing each other is identified and a set of technical measures for preventing the possibility of influencing is defined. In this way, an absence of feedback from non-safety-critical software components to safety-critical software components is both verified and also ensured by at least one embodiment of the present invention.

摘要翻译： 本发明的至少一个实施例涉及支持面向安全的系统，其中安全性系统包括安全关键的软件组件和非安全关键的软件组件。 在这种方法中，确定了安全关键软件组件和非安全关键软件组件相互影响的可能性，并定义了一套防止影响可能性的技术措施。 以这种方式，通过本发明的至少一个实施例来验证并且也确保了从非安全关键软件组件到安全关键软件组件的反馈。

公开(公告)号：US08577036B2

公开(公告)日：2013-11-05

申请号：US12937398

申请日：2009-02-20

申请人： Roland Porsch ,  Stefan Rothbauer

发明人： Roland Porsch ,  Stefan Rothbauer

IPC分类号： H04K1/00

CPC分类号： H04L9/3236 ,  H04L2209/84

摘要： A method and system for transmitting a message in real time between users in a closed network of a vehicle (1), in particular a rail-mounted vehicle, are provided, wherein safety-relevant real-time data (D) of a message (N), including a transmitter ID of a transmitter (3) within the closed network, is encrypted (S1) using a private key (KprivA) of the transmitter (3) in order to generate an encrypted message (N′); the encrypted message (N′), together with the unencrypted transmitter ID of the transmitter (3), is transmitted (S2) from the transmitter (3) to a receiver (4) within the closed network via a vehicle bus (2), and the encrypted message (N′) is decrypted by the receiver (4) using a public key (KpublicA) of the transmitter (3) identified by the received, unencrypted transmitter ID in order to retrieve the unencrypted message (N). The received transmitter ID is compared with the transmitter ID contained in the retrieved message (N) in order to determine whether the message (N) has been transmitted correctly.

摘要翻译： 提供一种用于在车辆（1），特别是轨道车辆的封闭网络中的用户之间实时地发送消息的方法和系统，其中消息的安全相关实时数据（D） （3）的私钥（KprivA）被加密（S1），以产生加密的消息（N'）; 经由车辆总线（2）将加密消息（N'）连同发送器（3）的未加密发送器ID从发送器（3）发送到闭合网络内的接收器（4） 并且使用由接收的未加密的发射机ID标识的发射机（3）的公开密钥（KpublicA），由接收机（4）对加密的消息（N'）进行解密，以便检索未加密的消息（N）。 将接收到的发射机ID与包含在检索的消息（N）中的发射机ID进行比较，以便确定消息（N）是否已被正确发送。

公开(公告)号：US20110213878A1

公开(公告)日：2011-09-01

申请号：US12994974

申请日：2009-03-24

申请人： Harald Karl ,  Roland Porsch ,  Stefan Rothbauer

发明人： Harald Karl ,  Roland Porsch ,  Stefan Rothbauer

IPC分类号： G06F15/173

CPC分类号： H04L63/1416 ,  G05B9/02 ,  G05B2219/24008 ,  G05B2219/24024 ,  G06F21/552 ,  G06F2221/2103 ,  G06F2221/2113

摘要： A system for monitoring a security-related system has a monitoring device on which a first process occurs. The monitoring device generates a monitoring result which is transmitted to another device that forms at least part of the security-related system. Accordingly, a second monitored process of the security-related system returns the received monitoring result to the first process for testing in order to calculate a processing result.

摘要翻译： 用于监视安全相关系统的系统具有监视装置，在其上进行第一进程。 监视装置生成监视结果，该监视结果被发送到形成安全相关系统的至少一部分的另一设备。 因此，安全相关系统的第二监视过程将接收到的监视结果返回到第一用于测试的过程，以便计算处理结果。

公开(公告)号：US20110055564A1

公开(公告)日：2011-03-03

申请号：US12937398

申请日：2009-02-20

申请人： Roland Porsch ,  Stefan Rothbauer

发明人： Roland Porsch ,  Stefan Rothbauer

IPC分类号： H04L9/14

CPC分类号： H04L9/3236 ,  H04L2209/84

摘要： A method and system for transmitting a message in real time between users in a closed network of a vehicle (1), in particular a rail-mounted vehicle, are provided, wherein safety-relevant real-time data (D) of a message (N), including a transmitter ID of a transmitter (3) within the closed network, is encrypted (S1) using a private key (KprivA) of the transmitter (3) in order to generate an encrypted message (N′); the encrypted message (N′), together with the unencrypted transmitter ID of the transmitter (3), is transmitted (S2) from the transmitter (3) to a receiver (4) within the closed network via a vehicle bus (2), and the encrypted message (N′) is decrypted by the receiver (4) using a public key (KpublicA) of the transmitter (3) identified by the received, unencrypted transmitter ID in order to retrieve the unencrypted message (N). The received transmitter ID is compared with the transmitter ID contained in the retrieved message (N) in order to determine whether the message (N) has been transmitted correctly.

摘要翻译： 提供一种用于在车辆（1），特别是轨道车辆的封闭网络中的用户之间实时地发送消息的方法和系统，其中消息的安全相关实时数据（D） （3）的私钥（KprivA）被加密（S1），以产生加密的消息（N'）; 经由车辆总线（2）将加密消息（N'）连同发送器（3）的未加密发送器ID从发送器（3）发送到闭合网络内的接收器（4） 并且使用由接收的未加密的发射机ID标识的发射机（3）的公开密钥（KpublicA），由接收机（4）对加密的消息（N'）进行解密，以便检索未加密的消息（N）。 将接收到的发射机ID与包含在检索的消息（N）中的发射机ID进行比较，以便确定消息（N）是否已被正确发送。

公开(公告)号：US08364626B2

公开(公告)日：2013-01-29

申请号：US12677886

申请日：2008-07-29

申请人： Reiner Heilmann ,  Manfred Lohner ,  Stefan Rothbauer ,  Ariane Sutor

发明人： Reiner Heilmann ,  Manfred Lohner ,  Stefan Rothbauer ,  Ariane Sutor

IPC分类号： G06F17/00 ,  G06N5/02

CPC分类号： G05B23/0248

摘要： IN a method and a device for determining a probability of occurrence that an overall system fulfills a predefined system performance, the overall system is composed of instances of different classes of partial systems, and each class of partial systems has an associated class fault tree. The method has the following steps: (a) calculating (S1) an overall performance for each failure combination of the number of non-failed instances within a class; (b) automatic selection (S2) of failure combinations, the calculated overall performance of which fulfills the predefined system performance; (c) automatic generation (S3) of an overall fault tree based on the class fault trees of partial systems as a function of the selected failure combinations; and (d) evaluating (S4) of the generated overall fault tree for calculating the probability of occurrence of a fulfillment of the predefined system performance by the overall system.

摘要翻译： 在用于确定整个系统满足预定义的系统性能的发生概率的方法和设备中，整个系统由不同类别的部分系统的实例组成，并且每个类别的部分系统具有相关联的类故障树。 该方法具有以下步骤：（a）计算（S1）课堂内非失败实例的数量的每个故障组合的总体性能; （b）故障组合的自动选择（S2），其计算的总体性能满足预定义的系统性能; （c）根据部分系统的类故障树作为所选择的故障组合的函数自动生成（S3）整个故障树; 以及（d）评估（S4）生成的整体故障树，以计算由整个系统实现预定义的系统性能的概率。

公开(公告)号：US20100223500A1

公开(公告)日：2010-09-02

申请号：US12677886

申请日：2008-07-29

申请人： Reiner Heilmann ,  Manfred Lohner ,  Stefan Rothbauer ,  Ariane Sutor

发明人： Reiner Heilmann ,  Manfred Lohner ,  Stefan Rothbauer ,  Ariane Sutor

IPC分类号： G06F11/07

CPC分类号： G05B23/0248

摘要： IN a method and a device for determining a probability of occurrence that an overall system fulfills a predefined system performance, the overall system is composed of instances of different classes of partial systems, and each class of partial systems has an associated class fault tree. The method has the following steps: (a) calculating (S1) an overall performance for each failure combination of the number of non-failed instances within a class; (b) automatic selection (S2) of failure combinations, the calculated overall performance of which fulfills the predefined system performance; (c) automatic generation (S3) of an overall fault tree based on the class fault trees of partial systems as a function of the selected failure combinations; and (d) evaluating (S4) of the generated overall fault tree for calculating the probability of occurrence of a fulfillment of the predefined system performance by the overall system.

摘要翻译： 在用于确定整个系统满足预定义的系统性能的发生概率的方法和设备中，整个系统由不同类别的部分系统的实例组成，并且每个类别的部分系统具有相关联的类故障树。 该方法具有以下步骤：（a）计算（S1）课堂内非失败实例的数量的每个故障组合的总体性能; （b）故障组合的自动选择（S2），其计算的总体性能满足预定义的系统性能; （c）根据部分系统的类故障树作为所选择的故障组合的函数自动生成（S3）整个故障树; 以及（d）评估（S4）生成的整体故障树，以计算由整个系统实现预定义的系统性能的概率。