EP3942766A1 - Procédé et dispositifs pour l'affectation de charges et la surveillance d'une ressource critique pour la sécurité d'approvisionnement à affecter dans un réseau - Google Patents

Procédé et dispositifs pour l'affectation de charges et la surveillance d'une ressource critique pour la sécurité d'approvisionnement à affecter dans un réseau

Info

Publication number
EP3942766A1
EP3942766A1 EP20711608.8A EP20711608A EP3942766A1 EP 3942766 A1 EP3942766 A1 EP 3942766A1 EP 20711608 A EP20711608 A EP 20711608A EP 3942766 A1 EP3942766 A1 EP 3942766A1
Authority
EP
European Patent Office
Prior art keywords
network
network unit
monitoring
unit control
control method
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
EP20711608.8A
Other languages
German (de)
English (en)
Inventor
Abhinav SADU
Gianluca LIPARI
Ferdinanda PONCI
Jindal AKSHAY
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Rheinisch Westlische Technische Hochschuke RWTH
Original Assignee
Rheinisch Westlische Technische Hochschuke RWTH
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from DE102019203874.3A external-priority patent/DE102019203874A1/de
Priority claimed from LU101163A external-priority patent/LU101163B1/de
Application filed by Rheinisch Westlische Technische Hochschuke RWTH filed Critical Rheinisch Westlische Technische Hochschuke RWTH
Publication of EP3942766A1 publication Critical patent/EP3942766A1/fr
Pending legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3236—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions
    • H04L9/3239—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
    • H04L43/0805—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters by checking availability
    • H04L43/0817—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters by checking availability by checking functioning
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/64—Protecting data integrity, e.g. using checksums, certificates or signatures
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q10/00—Administration; Management
    • G06Q10/06—Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q50/00—Systems or methods specially adapted for specific business sectors, e.g. utilities or tourism
    • G06Q50/06—Electricity, gas or water supply
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1416—Event detection, e.g. attack signature detection
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/12—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/50—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using hash chains, e.g. blockchains or hash trees

Definitions

  • the invention relates to a method and devices for load allocation and monitoring for a resource that is critical to the security of supply in a network to be allocated.
  • US 20170 103 468 A1 discloses a system for cryptographically secure, autonomous control of devices, having connected or remotely operated devices in an electrically operated network and the transaction of the advantages, costs or value that are provided by the devices in this electrically operated network be created or wound up.
  • a central control center that includes units such as supervisory control and data acquisition (SCADA), a distribution management system (DMS) and an energy management system (EMS).
  • SCADA supervisory control and data acquisition
  • DMS distribution management system
  • EMS energy management system
  • Real-time data is collected from remote devices, i.e. from Remote Terminal Units (RTUs), and stored in SCADA.
  • RTUs Remote Terminal Units
  • monitoring and control applications such as condition assessment, Volt VAR control or bottleneck management, which are hosted on DMS or EMS.
  • the aim of this invention is to increase the reliability of network automation through distributed, safe and automated migration of network applications or control functions.
  • the aim of the invention is to propose a possibility which avoids or at least reduces at least some of the disadvantages known in the prior art.
  • the present invention solves at least one of these disadvantages by means of a method according to the main claim and devices according to independent claims. Preferred further developments are the subject of the dependent claims.
  • the solution according to the invention proposes a method for load allocation and monitoring for a resource to be allocated in a network.
  • the resource to be allocated is a critical resource in the sense of a security of supply for a population group and / or a system.
  • the critical resource preferably has electrical energy.
  • the network is divided into network units and each network unit has a network unit controller.
  • the method has: provision of network unit control methods, network unit parameter data sets and sub-network monitoring methods in at least one blockchain, the at least one blockchain being set up to keep static and / or dynamic data particularly efficient; assigning a sub-network monitoring unit to a part of the network; transmitting a network unit control method to each network unit controller of the part of the network; transmit a network unit parameter data set to each network unit controller of the part of the network.
  • the transmission of the network unit control method and the network unit parameter data sets is cryptographically secured against reading and manipulation of the network unit control method and the network unit parameter data sets in such a way that the corresponding reading and manipulation is largely excluded.
  • the transmission of the network unit control method and the network unit parameter data sets to the corresponding network unit controllers takes place in such a way that these network unit control methods and these network unit parameter data sets ensure proper functioning of each network unit controller of the part of the network .
  • the method includes monitoring of the proper functioning of each network unit control of the part of the network by the sub-network monitoring unit using a corresponding sub-network monitoring method.
  • a load allocation according to the present invention means the allocation of a portion of the resource to be allocated to the network, a sub-network or to a network unit.
  • a critical resource according to the present invention means a resource which is important, necessary or essential in terms of security of supply for a population group and / or a system in order to ensure security of supply and / or the operation of the system.
  • Examples of such critical resources can therefore be electrical energy, water and / or also data communication, such as IP communication and / or also data communication with regard to automation technology, in particular in connection with so-called Industry 4.0.
  • a network unit means a device to which consumers are connected and which are assigned the required resource by this network unit.
  • a network unit controller means a controller for a network unit which takes over or controls the allocation of the required resource to the loads connected to the network unit.
  • a network unit control method means a method which provides or has an assignment routine for the assignment of a required resource to the consumers or consumers connected to the corresponding network unit.
  • a network unit parameter data record according to the present invention means data that are required for the functioning or control of the corresponding network unit controller or corresponding network unit. As a rule, these are, for example, setting parameters and / or also function parameters for the network unit controller or the corresponding network unit.
  • Part of a network means that the network can be divided into segments. Each segment corresponds to a different part of the network. This The division is usually of a purely logical nature, so it is usually a virtual division.
  • the network preferably consists of at least two or three segmentations. In principle, however, any number of segmentations are possible. In a very small network, only a single segment can be provided so that the part of the network encompasses the entire network.
  • Each part of the network preferably contains at least two network units. However, if the network is divided into a large number of segments, or if a segmentation that is not uniformly distributed is selected, then part of the network, i.e. a segment, can also consist of just one network unit.
  • a segmentation can be selected for example according to consumer types, consumer locations, network unit types, network unit locations and the like, many more criteria. Segmentation can also take place by random decision.
  • the segmentation of the network can thus be viewed as dynamic or quasi-static over the entire duration, depending on the period over which the segmentation is considered. The segmentation can, however, also remain unchanged over a longer period of time and thus then be understood as static.
  • a sub-network monitoring method means a method which takes over the higher-level monitoring of a part of the network or is responsible for it.
  • the sub-network monitoring method can also have a control function of the corresponding sub-network or its network unit controllers or its network units.
  • a blockchain according to the present invention means a continuously expandable list of data records, also called “blocks”, which are linked to one another using cryptographic methods.
  • Each block typically contains a cryptographically secure hash value (scatter value) of the previous block, a time stamp and Transaction data: This concept is also known as distributed ledger technology.
  • Static data means data which as a rule are not or only rarely changed over an operating period.
  • dynamic data means data which are subject to constant or frequent changes during operation.
  • a particularly efficient provision according to the present invention means that the data to be retained are retained in a required manner, particularly easily, quickly, compactly or in some other favorable manner, with regard to the course of the method.
  • Reading according to the present invention means that required information or data is taken from the data stream during its transmission and / or in the state stored in a memory before or after the transmission.
  • a manipulation according to the present invention means that required information or data are changed during their transmission in the data stream and / or also in the state stored in a memory before or after the transmission.
  • Ruling out reading and manipulation as far as possible according to the present invention means that, according to the opinion prevailing at least at the time of submission, this is not possible with justifiable effort and time. However, this preferably applies at the time the method is carried out.
  • the point in time preferably means a period of time which is in a relevant time proximity before the point in time when the method is executed.
  • Ensuring proper function according to the present invention means that it is ensured that the function can be carried out safely and correctly.
  • the method according to the invention has the advantage that both network automation and the reliability of the network can be increased.
  • the subject matter of a first independent claim of the invention comprises a network unit control device for controlling a network unit within a network, the network preferably being a network for a resource to be assigned, and the resource to be assigned being a critical resource in terms of security of supply Population group and / or a system.
  • the critical resource preferably has electrical energy.
  • the network unit control device has: transmitting and / or receiving means, the transmitting and / or receiving means being set up to transmit a network unit control method and / or a network unit parameter data set from and / or to a network unit control device Network monitoring unit or a sub-network monitoring unit.
  • the network unit control device is set up to ensure correct operation of the corresponding network unit based on the network unit control method and / or the network unit parameter data set. And the network unit control device is set up to at least partially carry out a method according to the invention.
  • the network unit control device according to the invention has the advantage that both network automation and the reliability of the network can be increased.
  • the subject matter of a further independent claim of the invention has a monitoring device for monitoring network unit control devices of corresponding network units within a network, the network preferably being a network for a resource to be assigned, and the resource to be assigned a critical resource in terms of security of supply a population group and / or a system.
  • the critical resource preferably has electrical energy.
  • the monitoring device has: storage means for holding network unit control methods, network unit parameter data sets and sub-network monitoring methods in at least one blockchain, the at least one blockchain being set up to hold static and / or dynamic data particularly efficiently; Transmitting and / or receiving means, the transmitting and / or receiving means being set up to transmit network unit control methods and / or network unit parameter data sets of the network unit control devices from and / or to the network unit control devices.
  • the transmission of the network unit control method and / or the network unit parameter data records is cryptographically secured against reading out and manipulation of the network unit control method and / or the network unit parameter data records in such a way that the corresponding reading out and manipulation of the transmission is largely excluded.
  • the monitoring device also has: a monitoring means for monitoring proper operation of the corresponding network units or proper function of the corresponding network unit control devices, based on the network unit control method and / or the network unit parameter data records. And the monitoring device is set up to at least partially carry out a method according to the invention.
  • the monitoring device according to the invention has the advantage that both network automation and the reliability of the network can be increased.
  • the subject of a further independent claim of the invention has a load allocation and monitoring system for a resource to be allocated in a network, preferably for a critical resource in terms of security of supply for a population group and / or a system, the critical resource preferably having electrical energy, and wherein the network is divided into network units and each network unit has a network unit controller.
  • the load allocation and monitoring system has: storage means for holding network unit control methods, network unit parameter data sets and sub-network monitoring methods in at least one blockchain, the at least one blockchain being set up to keep static and / or dynamic data particularly efficient; Assignment means for assigning a sub-network monitoring unit to a part of the network; Transmission means for transmitting a network unit control method to each network unit controller of the part of the network; Another transmission means for transmitting a network unit parameter data set to each network unit controller of the part of the network.
  • the transmission of the network unit control method and the network unit parameter data records is cryptographically secured against reading and manipulation of the network unit control method and the network unit parameter data records in such a way that the corresponding reading and manipulation is largely excluded.
  • the transmission of the network unit control method and the network unit parameter data sets to the corresponding network unit controls takes place in such a way that by means of these network unit control methods and these network unit parameter data sets, proper functioning of each network unit control of the part of the network is guaranteed.
  • the load allocation and monitoring system also has: a monitoring means for monitoring the proper functioning of each network unit control of the part of the network by the sub-network monitoring unit by means of a corresponding sub-network monitoring method. And the system is set up to carry out a method according to the invention.
  • Corresponding load assignments are made to the individual network units by means of the network unit control and the use of the network unit control method, the network unit parameter data sets and the sub-network monitoring method.
  • the load allocation and monitoring system according to the invention has the advantage that both network automation and the reliability of the network can be increased.
  • the teaching according to the invention has the advantage that the method can be carried out automatically in a particularly efficient manner.
  • the teaching according to the invention has the advantage that the method can be distributed or maintained particularly efficiently among the devices and / or systems executing the method.
  • the method further comprises: assigning a further subnetwork monitoring unit to a further part of the network; transmitting a network unit control method to each network unit controller of the further part of the network; transmitting a network unit parameter data set to each network unit controller of the wider part of the network; and monitor the proper functioning of each network unit controller of the further part of the network by the further sub-network monitoring unit by means of a corresponding sub-network monitoring method.
  • This embodiment has the advantage that both the network automation and the fail-safe security of the network can be increased even further.
  • the method further comprises: reading in network information, the network information being indicative of the proper functioning of each network unit controller to be monitored in the network.
  • This configuration has the advantage that the functional reliability of the network can be increased.
  • the method also has that the reading in of network information comprises: reading in network information for each part of the network; and storing the read-in network information for each part of the network in the corresponding sub-network monitoring unit.
  • This embodiment has the advantage that the network automation of the network can be increased even further.
  • the method furthermore has that the reading in and / or stored provision of the network information is cryptographically secured against reading out and manipulation of the network information in such a way that the corresponding reading out and manipulation is largely excluded.
  • This embodiment has the advantage that the security of the network can be increased.
  • the method also has that the transmission of a network unit control method to each network unit controller of each part of the network, the transmission of a network unit parameter data set to each network unit controller of each part of the network and / or reading network information for each part of the network and the stored provision of the read-in network information for each part of the network in the corresponding sub-network monitoring unit, based on a smart contracting process.
  • Smart contracting means computer protocols and / or virtual software-based protocols that map or check contracts or technically support the negotiation or processing of a contract. A written fixation of the contract on paper may thus be superfluous. Smart contracts technically map the logic of contractual regulations.
  • smart contracts are self-executing codes that automate workflows or processes. They are located on blockchain nodes and are therefore decentralized and cryptographically secured. Therefore, changes or additions to the smart contract code are not easily possible.
  • Such a smart contract is triggered by a transaction. It is then executed automatically and specified on each node in the network, based on the data entered in the transmitted transaction and the global status of the smart contract, i.e. the data stored on the blockchain node.
  • Intelligent contracts make it unnecessary for a third party to facilitate the exchange of information and / or instructions between the transaction partners or devices, since all network nodes execute the contract and reach a consensus on the generated output. If a node is malicious or altered, then it leads to mixed results and prevents the network from reaching consensus.
  • This embodiment has the advantage that both the network automation and the fail-safe security of the network can be increased even further.
  • the method also has a further blockchain.
  • the blockchain is set up to hold static data particularly efficiently, and the other blockchain is set up to hold dynamic data particularly efficiently.
  • the method also has a particularly efficient storage of data in the corresponding blockchain, a particularly memory-efficient and / or particularly time-efficient processing of the corresponding data.
  • This embodiment has the advantage that the execution speed of the network can be increased and / or that the costs can be reduced, since lower demands can be made on the hardware.
  • the method also has that the blockchain and / or the further blockchain is furthermore set up to hold at least one of the following data records:
  • Network unit control parameters of each sub-network monitoring unit with regard to the accessibility or responsiveness of the corresponding sub-network monitoring unit.
  • the request parameters for each network unit control method with regard to a check as to whether a sub-network monitoring unit is suitable for carrying out the corresponding network unit control method can be mutually different for each network unit controller in the network or for each network unit control method to be carried out in the network - be divorced.
  • the connection between a sensor and an actuator can also be subject to different quality-of-service requirements (QoS requirements), i.e. the requirement parameters are subject to these different quality-of-service requirements for the relationship between sensor and actuator for each corresponding network unit. Control suffice.
  • QoS requirements quality-of-service requirements
  • This embodiment has the advantage that the request parameters with regard to a check as to whether a sub-network monitoring unit is suitable for performing the corresponding network unit control method and / or the network unit control parameters with regard to the accessibility or responsiveness of the corresponding network unit control in same way as the other data to be secured in the corresponding blockchain can be secured against manipulation.
  • the method also has: randomized, periodic and / or triggered assignment of each network unit control method to each network unit controller; and randomized, periodic and / or triggered assignment of each network unit parameter data set to each network unit controller.
  • a randomized assignment according to the present invention means an assignment based on a triggered random event. This can in particular mean an assignment according to a common random principle.
  • a periodic assignment in accordance with the present invention means an assignment according to a chronological and / or numerical sequence. In particular, this can mean that each time a defined period of time has expired, a new assignment takes place. This reassignment can then take place in a randomized manner, for example. In this case, the segmentation can be viewed as dynamic.
  • the system can avoid failures because the actor's execution environment is not fixed and it would be difficult for any attacker to predict the actor's execution location.
  • These actors can usually be automated processes (algorithms) for network monitoring and for controlling the network or network units. Assuming a recurring migration is triggered before the runtime fails, then the actor is migrated to a new runtime and the attack is carried out.
  • Such a runtime can be hardware - that is, a device - that hosts these actors, that is, receives and provides them.
  • the attacker cannot immediately predict the new location of the actor, since the target duration is chosen randomly by the smart contract. Therefore, periodic migration can make the system more robust and reliable.
  • only one actor can be migrated at a time if several actors are present at runtime.
  • Runtime passes a blockchain transaction that executes intelligent contract logic.
  • Smart Contract generates an output that contains the target runtime ID, the ID of the migration actor and the status of the actor.
  • the current runtime performs the actual migration using the output of the smart contract.
  • the current runtime or the method submits a further transaction to update the blockchain status, that is, to update the property, i.e. the sub-network monitoring unit, the network unit controller and / or the network unit, of the migrated actor , so the sub-network monitoring unit.
  • a triggered assignment according to the present invention means an assignment that is triggered by the occurrence of a specific event. This assignment can then take place randomly, for example. In this case, the segmentation can be viewed as quasi-static.
  • a heartbeat performer which runs on every runtime, ie the subnet monitoring unit, regularly checks whether other runtimes are working or not. If a runtime, i.e. a sub-network monitoring unit, fails, all other runtimes in the same network will discover their error, since they do not receive a heartbeat signal from the failed runtime.
  • a new operational runtime must be selected which is responsible for the redistribution of the actors, that is, network unit control methods, network unit parameter data sets, and / or network unit control, of the failed runtime.
  • the selected runtime sends a blockchain transaction containing the ID of the failed runtime.
  • Smart Contract processes the transaction and selects the new optimal term for placing an actor of the failed term. Results are generated that contain the target runtime ID, the actor ID (the actor to be re-deployed) and the status of the actor (the last saved status before the error).
  • the selected node analyzes the state of the actor, reconfigures the actor ports and then initiates the use of the actor on the selected target runtime.
  • the selected node sends another blockchain transaction to update the ownership of the newly deployed actor.
  • the selected node repeats steps 3 through 5 until all actors of the failed runtime have been redeployed.
  • the selected runtime sends a blockchain transaction to update the status of the failed runtime so that the logic of the smart contract does not take this runtime into account in its runtime selection process.
  • the selected runtime informs other runtimes to restart their periodic migration.
  • This embodiment has the advantage that both the network automation and the fail-safe security of the network can be increased even further.
  • the method furthermore has that the randomized, periodic and / or triggered assignment of each network unit control method to each network unit controller, taking into account an ability to execute the network unit control method to be assigned, for the corresponding Network unit control, in which the network unit control to be assigned takes place.
  • An ability to execute the network unit control method to be assigned according to the present invention means that the complexity of the network unit control method to be assigned must not exceed the complexity or capabilities of the network unit controller or must be adapted to its complexity, thus not detrimental to the Proper control of the relevant network unit by the network unit controller to be operated with the network unit control method to be assigned.
  • the method also has that the randomized, periodic and / or triggered assignment of each network unit control method to each network unit controller, and the randomized, periodic and / or triggered assignment of each network unit Parameter data set for each network unit controller, in each case within the respective part of the network of that sub-network monitoring unit that is responsible for the respective part of the network.
  • This embodiment has the advantage that both the network automation and the fail-safe security of the network can be increased even further.
  • the method also has that the assignment of each network unit control method to each sub-network monitoring unit includes checking the corresponding network unit controller as to whether it is suitable for performing the network unit control method to be assigned. And if the corresponding subnetwork monitoring unit is suitable for carrying out the network unit control method to be assigned, this network unit control method is assigned to the corresponding subnetwork monitoring unit.
  • This refinement has the advantage that subnetwork monitoring units are only assigned network unit control methods that they can actually carry out. This avoids assignments that could lead to network unit control procedures not being carried out.
  • the method also has the provision of network unit control methods, network unit parameter data sets and subnetwork monitoring methods in at least one blockchain based on a time stamp method.
  • a time stamping method means a method which can assign an unambiguous point in time to an event.
  • the method furthermore has that the resource to be assigned is electrical energy to be distributed, a liquid to be distributed or a gas to be distributed.
  • This embodiment has the advantage that the method can be applied to the most important supply resources for human living.
  • the method further comprises: distributed assignment of each network unit controller of the network to each part of the network of each sub-network monitoring unit.
  • This embodiment has the advantage that both the network automation and the fail-safe security of the network can be increased even further.
  • the method also has that the transmission of a network unit control method to each network unit controller of each part of the network and / or the transmission of a network unit parameter data set to each network unit controller of each part of the Network and / or the reading in of network information for each part of the network and / or the stored provision of the read in network information for each part of the network in the corresponding subnet monitoring unit takes place in real time.
  • Real-time characterizes the operation of information technology systems which can reliably deliver certain results within a predetermined period of time, for example in a fixed time grid.
  • the hardware and software must ensure that there are no delays which could prevent compliance with this condition.
  • the data does not have to be processed particularly quickly, it just has to be guaranteed to be fast enough for the respective application.
  • the currently relevant standard for this is DIN ISO / IEC 2382 (as amended in May 2015).
  • the method also has, in the event of a failure of any subnetwork monitoring unit: Distributed assignment of those network unit controls that are part of the network of the failed subnetwork monitoring unit to the remaining subnetwork monitoring units not affected by the failure.
  • This embodiment has the advantage that both the network automation and the fail-safe security of the network can be increased even further.
  • FIG. 1 shows a schematic representation of a proposed network which is operated by means of a method according to an exemplary embodiment of the invention
  • FIG. 2 shows a schematic representation of a sequence of the method proposed in FIG. 1 according to a further exemplary embodiment of the invention
  • FIG. 3 shows a schematic representation of a first proposed device according to a further exemplary embodiment of the invention.
  • FIG. 4 shows a schematic representation of a further proposed device according to a further exemplary embodiment of the invention.
  • Fig. 5 is a schematic representation of a further proposed device according to a wide Ren exemplary embodiment of the invention.
  • FIG. 6 shows a section of a schematic representation of a proposed network which is operated by means of a method according to an exemplary embodiment of the invention.
  • Fig. 7 shows another aspect of the invention.
  • Figures with numerical values are generally not to be understood as exact values, but also include a tolerance of +/- 1% up to +/- 10%.
  • FIG. 1 shows a schematic representation of a proposed network which is operated by means of a method according to an exemplary embodiment of the invention.
  • FIG. 1 shows a schematic representation of a load allocation and monitoring system 160 according to the invention for a resource to be allocated in a network 100, preferably for a critical resource in the sense of security of supply for a population group and / or a system, the critical resource preferably having electrical energy , and wherein the network 100 is divided into network units 101 and each network unit 101 has a network unit controller 211. Each network unit 101 can also have a plurality of network unit controllers 211.
  • the load allocation and monitoring system 160 has monitoring devices 150 according to the invention for monitoring 50 network unit control devices 211 of corresponding network units 101 within a network 100.
  • the load allocation and monitoring system 160 also has network unit control devices 211 according to the invention for controlling a network unit 101 within a network Network 100.
  • a method according to the invention provides for a load allocation and a monitoring for the resource to be allocated in the network 100.
  • the load allocation and monitoring system 160 thus has: Provision means 151 for provision 10 (not shown in FIG. 1) of network unit control methods 11 (not in FIG Fig. 1), network unit parameter data sets 12 (not shown in Fig. 1) and Operanetzschreib monitoring method 13 (not shown in Fig. 1) in at least one blockchain 300 (not shown in Fig. 1).
  • the at least one blockchain 300 is set up to hold static and / or dynamic data particularly efficiently.
  • Another transmission means 163 (not shown in FIG.
  • the transmission 30, 40 is the network unit control method 11 and the Network unit parameter data sets 12 are cryptographically secured against reading and manipulation of the network unit control method 11 and the network unit parameter data sets 12 in such a way that the corresponding reading and manipulation is largely excluded.
  • the transmission 30, 40 of the network unit control method 11 and the network unit parameter data sets 12 to the corresponding network unit controls 211 takes place in such a way that by means of this network unit control method 11 and these network unit parameter data sets 12, proper functioning of each network unit. Control 211 of the part of the network 110 is guaranteed.
  • the load allocation and monitoring system 160 has a monitoring means 152 for monitoring 50 the correct functioning of each network unit controller 211 of the part of the network 110 by the sub-network monitoring unit 111 by means of a corresponding sub-network monitoring method 13.
  • FIG. 2 shows a schematic representation of a process sequence according to the invention for the load allocation and monitoring system 160 proposed in FIG. 1, according to a further exemplary embodiment of the invention.
  • FIG. 2 shows a method for load allocation and monitoring for a resource to be allocated in a network 100, the resource to be allocated being a critical resource in terms of security of supply for a population group and / or a system, the critical resource preferably having electrical energy , and wherein the network 100 is divided into network units 101 and each network unit 101 has a network unit controller 211, the method comprising: Provision 10 of network unit control method 11, network unit parameter data sets 12 and subnet monitoring method 13 in at least one blockchain 300, wherein the at least one blockchain 300 is set up to hold static and / or dynamic data particularly efficiently. Assign 20 a subnetwork monitoring unit 111 to a part of the Network 110. Transmission 30 of a network unit control method 11 to each network unit controller 211 of the part of the network 110.
  • Transmission 40 of a network unit parameter data set 12 to each network unit controller 211 of the part of the network 110 takes place 30 , 40 of the network unit control method 11 and the network unit parameter data sets 12 are cryptographically secured against reading and manipulation of the network unit control method 11 and the network unit parameter data sets 12 that the corresponding reading and manipulation is largely excluded.
  • the transmission 30, 40 of the network unit control method 11 and the network unit parameter data sets 12 to the corresponding network unit controls 211 takes place in such a way that by means of these network unit control methods 11 and these network unit parameter data sets 12, proper functioning of each network unit control tion 211 of the part of the network 100 is guaranteed.
  • the method further comprises: monitoring 50 of the proper functioning of each network unit controller 211 of the part of the network 110 by the sub-network monitoring unit 111 by means of a corresponding sub-network monitoring method 13.
  • Fig. 3 shows a schematic representation of a first proposed device according to a white direct exemplary embodiment of the invention.
  • FIG. 3 shows a schematic representation of a network unit control device 211 according to the invention, for controlling a network unit 101 within a network 100, the network 100 preferably being a network for a resource to be assigned, and the resource to be assigned being a critical resource in the sense a security of supply of a population group and / or a system, and wherein the critical resource preferably comprises electrical energy, the network unit control device 211 comprising: transmitting and / or receiving means 130, wherein the transmitting and / or receiving means 130 is set up, for transmitting 30, 40 a network unit control method 11 and / or a network unit parameter data set 12 of the network unit control device 211 from and / or to a network monitoring unit or a sub-network monitoring unit 111.
  • the transmission 30, 40 of the network unit control method 11 and / or the network unit -Parameter data Record 12 is cryptographically secured against reading and manipulation of the network unit control method 11 and / or the network unit parameter data record 12 in such a way that the corresponding reading and manipulation of the transmission 30, 40 is largely excluded.
  • the network unit control device 211 is set up to ensure proper operation of the corresponding network unit 101 based on the network unit control method 11 and / or the network unit parameter data set 12 guarantee. And the network unit control device 211 is set up to at least partially carry out a method according to the invention.
  • FIG. 4 shows a schematic illustration of a further proposed device according to a further exemplary embodiment of the invention.
  • FIG. 4 shows a schematic representation of a monitoring device 150 according to the invention, for monitoring 50 network unit control devices 211 of corresponding network units 101 within a network 100, the network 100 preferably being a network for a resource to be assigned, and the resource to be assigned being a critical one Resource in the sense of a security of supply of a population group and / or a system, and wherein the critical resource preferably comprises electrical energy, the monitoring device 150 having: Provision means 151 for the provision 10 of network unit control method 11, network unit parameter data sets 12 and sub-network monitoring method 13 in at least one blockchain 300, the at least one blockchain 300 being set up to hold static and / or dynamic data particularly efficiently.
  • a sending and / or receiving means 130 the sending and / or receiving means 130 being set up to transmit 30, 40 of network unit control methods 11 and / or of network unit parameter data sets 12 of the network unit control devices 211 from and / or to the network unit control devices 211.
  • the transmission 30, 40 of the network unit control method 11 and / or the network unit parameter data sets 12 is cryptographically secured against reading and manipulation of the network unit control method 11 and / or the network unit parameter data sets 12 such that the corresponding reading and manipulation of the transmission 30, 40 is largely excluded.
  • the monitoring device 150 also has a monitoring means 152 for monitoring 50 proper operation of the corresponding network units 101 or proper functioning of the corresponding network unit control devices 211, based on the network unit control method 11 and / or the network unit parameter data sets 12. And the monitoring device 150 is set up to at least partially carry out a method according to the invention.
  • 5 shows a schematic representation of a further proposed device according to a further exemplary embodiment of the invention.
  • 5 shows a schematic representation of a load allocation and monitoring system 160 according to the invention for a resource to be allocated in a network 100, preferably for a critical resource in the sense of security of supply for a population group and / or a system, the critical resource preferably having electrical energy , and wherein the network 100 is subdivided into network units 101 and each network unit 101 has a network unit controller 211, the load allocation and monitoring system 160 having: storage means 151 for holding 10 network unit control method 11, network unit parameter data sets 12 and subnet monitoring method 13 in at least one blockchain 300.
  • the at least one blockchain 300 is set up to hold static and / or dynamic data particularly efficiently.
  • Allocation means 161 for allocating 20 a sub-network monitoring unit 111 to part of the network 110
  • Determination means 162 for transmitting 30 a network unit control method 11 to each network unit controller 211 of the part of the network 110.
  • Another transmission means 163 for transmitting 40 a network unit parameter data set 12 to each network unit controller 211 of the part of the network 110
  • the transmission 30, 40 of the network unit control method 11 and the network unit parameter data sets 12 is cryptographically secured against reading out and manipulation of the network unit control method 11 and the network unit parameter data sets 12 in such a way that the corresponding reading and manipulation are largely is excluded.
  • the transmission 30, 40 of the network unit control method 11 and the network unit parameter data sets 12 to the corresponding network unit controls 211 takes place in such a way that by means of these network unit control methods 11 and these network unit parameter data sets 12, proper functioning of each network unit control tion 211 of the part of the network 110 is guaranteed.
  • the load allocation and monitoring system 160 also has a monitoring means 152 for monitoring 50 the proper functioning of each network unit controller 211 of the part of the network 110 by the subnet monitoring unit 111 by means of a corresponding subnet monitoring method 13. And the system is set up for this purpose to carry out a method according to the invention.
  • a request parameter QoS_40_211 relates to a specific communication channel between a specific subnetwork monitoring unit 111 and a network unit controller 211. This parameter can also be saved in the blockchain.
  • the reference character qos denotes measured parameters which are carried out by a QoS determination device, for example within a subnetwork monitoring unit 111, in order to determine a request parameter QoS_40_211
  • a specific request parameter QoS_40_211_a, QoS_40_211_b, QoS_40_211_c can be required for the communication paths between a subnetwork monitoring unit 111 and one or more network unit controllers 211_a, 211_b, 211_c. This can be understood as part of the network unit parameter data set 40.
  • a specific QoS can be made available for a specific communication path. It can now be decided on the basis of an actual (measured) property of the respective communication channel whether a first sub-network monitoring unit 111_1 or another sub-network monitoring unit, e.g. Subnetwork monitoring unit 111_2 is able to provide the parameters required "on the software side" also on the hardware side. If this is not possible, then a corresponding subnetwork monitoring unit 111 should not be entrusted with corresponding tasks.
  • the requirements for all paths can be the same, or, as shown in FIG. 6, it can be different for each individual path. Obviously, mixed forms can also be provided so that, for example, for certain paths to certain network unit controls, different requirement parameters apply than for others.
  • a requirement parameter can be determined for a sub-network monitoring unit 111.
  • the performance in particular the performance of real-time processing, can be given via this, ie for placing a task 161, 162, 151, 152 on a sub-network monitoring unit 111, such as
  • requirements must be placed on the performance of the subnetwork monitoring unit 111 per se. Is this currently not provided because e.g.
  • a corresponding subnetwork monitoring unit 111 should not be assigned corresponding tasks to be entrusted.
  • the method according to the invention can therefore also have the blockchain and / or the further blockchain also being set up to hold at least one of the following data records: Requirement parameters 40 for each network unit control method with regard to a check as to whether a sub-network monitoring unit 111 is suitable for performing the corresponding network unit control method.
  • Network unit control parameters of each network unit controller with regard to the accessibility or responsiveness of the corresponding network unit controller.
  • the request parameters for each network unit control method with regard to a check as to whether a sub-network monitoring unit 111 is suitable for performing the corresponding network unit control method can be mutually different for each sub-network monitoring unit 111 in the network or for each network unit control method to be carried out in the network to be different.
  • the connection between a sensor and an actuator 211 can also be subject to different quality-of-service requirements (QoS requirements), i.e. the requirement parameters of these different quality-of-service requirements for the relationship between sensor and actuator for each corresponding subnetwork monitoring unit 111 suffice.
  • QoS requirements quality-of-service requirements
  • This embodiment has the advantage that the request parameters with regard to a check as to whether a sub-network monitoring unit 111 is suitable for carrying out the corresponding network unit control method and / or the network unit control parameters regarding the accessibility or responsiveness of the corresponding sub-network monitoring unit 111 in the same way as the other data to be secured in the corresponding blockchain can be secured against manipulation.
  • the method further includes that the assignment of each network unit control method to each sub-network monitoring unit 111 includes checking the corresponding network unit controller as to whether it is suitable for performing the network unit control method to be assigned. And if the corresponding sub-network monitoring unit 111 is suitable for carrying out the network unit control method to be assigned, this network unit control method is assigned to the corresponding network unit controller.
  • This refinement has the advantage that subnetwork monitoring units 111 are only assigned network unit control methods that they can actually carry out. This avoids assignments that could lead to network unit control procedures not being carried out.
  • Quality is meant in the sense of Quality-of-Service QoS. It has been shown that for reasons of performance it can be advantageous that certain subnetwork monitoring units 111 could not be suitable for certain algorithms 151, 152, 161, 162 because the bandwidth and / or security of the transmission link is not given, or else a certain subnetwork monitoring unit 111 is not suitable, e.g. To provide computing power for real-time processing. I.e. During the (re-) distribution / relocation of functions, it can be checked whether a device is physically capable of fulfilling a software requirement. If so, the functionality can be provided, if not, another solution must be sought. For example, algorithms 151, 152, 161, 162 can then be redistributed to different subnetwork monitoring units 111.
  • a different priority can be assigned to the algorithms 151, 152, 161, 162 so that important functions are given higher priority and can accordingly be distributed preferentially before other functions with lower priority are distributed. In such a case, it can also be provided that algorithms 151, 152, 161, 162 with a low priority are not distributed due to a lack of resources.
  • the software requirement for QoS can be stored in the blockchain.
  • Physical parameters such as an address (MAC / IP) of subnetwork monitoring units 111 and of network unit controllers 211 can be stored in blockchain 300.
  • the entire power grid 100 can be operated entirely by monitoring and controlling the segments 110.
  • Each segment 110 consists of various sensors and actuators, the network unit controllers 211.
  • the sub-network monitoring units 111 are set up for monitoring and controlling each segment 110 of the power network 100.
  • Each sub-network monitoring unit 111 receives real-time data from corresponding network unit controllers 211 and uses the allocation means 161, transmission means 162 and monitoring means 152 for monitoring, controlling and protecting the segments 110
  • Real-time data received by sub-network monitoring units 111 are stored in a blockchain 300.
  • the sub-network monitoring units 111 can communicate with one another. All subnetwork monitoring units 111 can preferably communicate with one another. They form a meshed network of sub-network monitoring units 111.
  • the sub-network monitoring units 111 are implemented in hardware in which the allocation means 161, transmission means 162 and
  • Monitoring means 152 are hosted, wherein they use the computing resources of the respective sub-network monitoring units 111.
  • the load allocation corresponds in principle to the allocation of allocation means 161, transmission means 162, monitoring means 152 and storage means 151 to various subnetwork monitoring units 111.
  • Each subnetwork monitoring unit 111 can also host the blockchain 300.
  • Each sub-network monitoring unit 111 preferably hosts the (same) blockchain 300.
  • the sub-network monitoring units 111 can communicate with one another and store their available computing resources, bandwidths and the like in the blockchain 300. This can be done including all other necessary data for an optimal assignment of allocation means 161, transmission means 162, monitoring means 152 and storage means 151.
  • the resource allocation can take place within the network of the subnetwork monitoring units 111.
  • the smart contract-based resource allocation can take place for the allocation means 161, transmission means 162, monitoring means 152 and storage means 151 from subnetwork monitoring unit 111 to subnetwork monitoring unit 111.
  • a sub-network monitoring unit 111 can interact with any type of network unit controller 211 or only with network unit controllers 211 that are also able to receive control commands.
  • the network unit controllers 211 can be present in a corresponding part of the network / segment 110, the entire part of the network 110 and not just one network unit 101 being controllable.
  • monitoring algorithm 162 means of transmission

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Business, Economics & Management (AREA)
  • Health & Medical Sciences (AREA)
  • Economics (AREA)
  • Theoretical Computer Science (AREA)
  • General Health & Medical Sciences (AREA)
  • Computing Systems (AREA)
  • Strategic Management (AREA)
  • Human Resources & Organizations (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Marketing (AREA)
  • General Business, Economics & Management (AREA)
  • Tourism & Hospitality (AREA)
  • Entrepreneurship & Innovation (AREA)
  • Medical Informatics (AREA)
  • Environmental & Geological Engineering (AREA)
  • Operations Research (AREA)
  • Bioethics (AREA)
  • Game Theory and Decision Science (AREA)
  • Development Economics (AREA)
  • Quality & Reliability (AREA)
  • Educational Administration (AREA)
  • Software Systems (AREA)
  • Public Health (AREA)
  • Water Supply & Treatment (AREA)
  • Primary Health Care (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

L'invention concerne un dispositif et un procédé pour l'affectation de charges et la surveillance d'une ressource à affecter dans un réseau (100), la ressource à affecter étant une ressource critique dans le sens d'une sécurité d'approvisionnement d'un groupe de population et/ou d'un système, et la ressource critique présentant de l'énergie électrique, le réseau (100) étant divisé en unités de réseau (101) et chaque unité de réseau (101) présentant une commande d'unité de réseau (211), le procédé présentant : la fourniture (10) de procédés de commande d'unité de réseau (11), d'ensembles de données de paramètres d'unités de réseau (12) et de procédés de surveillance de sous-réseaux (13) dans au moins une chaîne de blocs (300). L'affectation (20) d'une unité de surveillance de sous-réseaux (111) à une partie du réseau (110). La transmission (30, 40) d'un procédé de commande d'unités de réseau (11) et d'un ensemble de données de paramètres d'unités de réseau (12) à chaque commande d'unité de réseau (211) d'une partie du réseau (110). La transmission (30, 40) des procédés de commande d'unités de réseau (11) et des ensembles de données de paramètres d'unités de réseau (12) s'effectue de façon sécurisée cryptographiquement contre la lecture et la manipulation des procédés de commande d'unités de réseau (11) et des ensembles de données de paramètres d'unités de réseau (12) de telle sorte que la lecture et la manipulation correspondantes sont exclues dans la mesure du possible et s'effectue de telle façon qu'un fonctionnement correct de chaque commande d'unité de réseau (211) de la partie du réseau (100) est garantie. La surveillance (50) du fonctionnement correct de chaque commande d'unité de réseau (211) de la partie du réseau (110) par l'unité de surveillance de sous-réseaux (111) au moyen d'un procédé de surveillance de sous-réseaux (13) correspondant.
EP20711608.8A 2019-03-21 2020-03-20 Procédé et dispositifs pour l'affectation de charges et la surveillance d'une ressource critique pour la sécurité d'approvisionnement à affecter dans un réseau Pending EP3942766A1 (fr)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
DE102019203874.3A DE102019203874A1 (de) 2019-03-21 2019-03-21 Verfahren und Vorrichtungen für eine Lastzuweisung und Überwachung für eine zuzuweisende versorgungssicherheitskritische Ressource in einem Netzwerk
LU101163A LU101163B1 (de) 2019-03-21 2019-03-21 Verfahren und Vorrichtungen für eine Lastzuweisung und Überwachung für eine zuzuweisende versorgungssicherheitskritische Ressource in einem Netzwerk
PCT/EP2020/057777 WO2020188082A1 (fr) 2019-03-21 2020-03-20 Procédé et dispositifs pour l'affectation de charges et la surveillance d'une ressource critique pour la sécurité d'approvisionnement à affecter dans un réseau

Publications (1)

Publication Number Publication Date
EP3942766A1 true EP3942766A1 (fr) 2022-01-26

Family

ID=69844843

Family Applications (1)

Application Number Title Priority Date Filing Date
EP20711608.8A Pending EP3942766A1 (fr) 2019-03-21 2020-03-20 Procédé et dispositifs pour l'affectation de charges et la surveillance d'une ressource critique pour la sécurité d'approvisionnement à affecter dans un réseau

Country Status (3)

Country Link
US (1) US11729078B2 (fr)
EP (1) EP3942766A1 (fr)
WO (1) WO2020188082A1 (fr)

Family Cites Families (16)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7480737B2 (en) * 2002-10-25 2009-01-20 International Business Machines Corporation Technique for addressing a cluster of network servers
WO2004092927A2 (fr) * 2003-03-31 2004-10-28 General Dynamics-C4 Systems, Inc. Gestion de session/controle d'admission d'appel basee sur une source n a des degres de gravite de destination pour des reseaux ip
ATE515920T1 (de) * 2004-08-13 2011-07-15 Research In Motion Ltd Verfahren und vorrichtungen zum effizienten einrichten und aufrechterhalten einer datenverbindung zwischen einer mobilstation und einem drahtlosen netzwerk
US20060274743A1 (en) * 2005-06-06 2006-12-07 Alper Yegin System and method for a mobile device to learn information about the access networks within its neighborhood
US20130064178A1 (en) * 2011-09-13 2013-03-14 Adishesha CS System For Monitoring Electrical Power Distribution Lines In A Power Grid Using A Wireless Sensor Network
WO2013039973A1 (fr) * 2011-09-16 2013-03-21 Cisco Technology, Inc. Protocole de contrôle générique
US9655155B2 (en) * 2012-04-27 2017-05-16 Lg Electronics Inc. Method and apparatus for establishing device-to-device connection in wireless communication system
EP3362965A4 (fr) 2015-10-13 2019-08-07 Transactive Grid Inc. Utilisation d'une commande de consensus distribuée basée sur une chaîne de blocs
EP3590175B1 (fr) * 2017-03-03 2020-08-05 Innogy Innovation GmbH Système de commande de réseau électrique basé sur un réseau poste à poste
ES2887378T3 (es) * 2017-03-09 2021-12-22 Magnus Skraastad Gulbrandsen Proveedor de acceso a una red central
US10541886B2 (en) * 2017-05-24 2020-01-21 International Business Machines Corporation Decentralized change management based on peer devices using a blockchain
US10608910B2 (en) 2017-06-26 2020-03-31 Myomega Systems Gmbh Using blockchain to track information for devices on a network
US10601665B2 (en) 2017-07-26 2020-03-24 International Business Machines Corporation Using blockchain smart contracts to manage dynamic data usage requirements
CN109033143B (zh) * 2018-06-11 2021-06-29 中国科学院广州能源研究所 基于区块链的分布式、分域电网数据处理系统及其方法
IL268485B (en) * 2018-08-13 2022-04-01 Waterfall Security Solutions Ltd Automatic security response using one-way links
EP3881409A4 (fr) * 2018-11-14 2022-08-10 Ongrid Options, LLC Technologies pour des opérations d'îlotage temporaire de sections de réseau électrique

Also Published As

Publication number Publication date
WO2020188082A1 (fr) 2020-09-24
US11729078B2 (en) 2023-08-15
US20220166696A1 (en) 2022-05-26

Similar Documents

Publication Publication Date Title
EP3402152A1 (fr) Gestion de certificat automatisée, en fonction de l'installation
DE112011103443T5 (de) Intelligente Schnittstelle für ein dezentrales Steuerungssystem
DE102017214068B4 (de) Verfahren, Vorrichtung und Computerprogramm zur dynamischen Ressourcenzuweisung in einem Mehrprozessor-Computersystem
EP3113461B1 (fr) Procédé d'établissement de liaisons de communication à des appareils de commande à fonctionnement redondant d'un système d'automatisation industrielle et appareil de commande
EP3501140A1 (fr) Procédé pour faire fonctionner un réseau de communication d'un système d'automatisation industriel comprenant plusieurs appareils de communication, et unité de commande
EP1634176B1 (fr) Dispositif cluster
DE102012022299A1 (de) BUS-System, Verfahren zum Betrieb eines BUS-Systems und fluidisches System mit einem BUS-System
EP3942766A1 (fr) Procédé et dispositifs pour l'affectation de charges et la surveillance d'une ressource critique pour la sécurité d'approvisionnement à affecter dans un réseau
LU101163B1 (de) Verfahren und Vorrichtungen für eine Lastzuweisung und Überwachung für eine zuzuweisende versorgungssicherheitskritische Ressource in einem Netzwerk
EP2333624A1 (fr) Procédé et dispositif de configuration d'un composant dans une installation d'automatisation industrielle
DE102004011201B4 (de) Verfahren zum Management und zur Überwachung des Betriebs mehrerer in wenigstens ein Kommunikationsnetz eingebundener verteilter Hard- und/oder Softwaresysteme sowie System zur Durchführung des Verfahrens
DE112013006756T5 (de) Kommunikations-, Steuervorrichtung und Programm
DE102019203874A1 (de) Verfahren und Vorrichtungen für eine Lastzuweisung und Überwachung für eine zuzuweisende versorgungssicherheitskritische Ressource in einem Netzwerk
EP3705993B1 (fr) Système et procédé de détection et d'identification des n uds de calcul dans un réseau
WO2016079091A1 (fr) Procédé de fonctionnement d'un premier et d'au moins un deuxième appareil de terrain
DE10249403B4 (de) Verfahren zum Konfigurieren von Datenkommunikationswegen in einem System
DE102019208519A1 (de) Verfahren und Vorrichtung zum Anpassen einer Softwareanwendung
EP2224301A1 (fr) Arrangement d'automatisation doté d'un composant d'automatisation industriel et procédé d'administration d'un composant d'automatisation industriel
EP3454222A1 (fr) Procédé et composants d'automatisation permettant la transmission de données de commande dans une installation d'automatisation industrielle
WO2019063327A1 (fr) Procédé et dispositif d'établissement d'un canal de communication entre un premier et un deuxième dispositif
DE102017204212A1 (de) Verfahren und Vorrichtung zum Verwalten von Applikationen für Fahrzeuge
DE102009008033B3 (de) Versorgung von energietechnischen Objekten mit Energie verschiedener Energiearten
WO2023138721A1 (fr) Procédé de génération d'un profil de capacité d'une unité de calcul
EP4293512A1 (fr) Procédé de fourniture d'une pluralité d'applications et système de communication
WO2022167073A1 (fr) Procédé de fonctionnement d'un dispositif de terrain, et système de fonctionnement de dispositifs de terrain

Legal Events

Date Code Title Description
STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: UNKNOWN

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE INTERNATIONAL PUBLICATION HAS BEEN MADE

PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: REQUEST FOR EXAMINATION WAS MADE

17P Request for examination filed

Effective date: 20211021

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

DAV Request for validation of the european patent (deleted)
DAX Request for extension of the european patent (deleted)