EP4066114A1 - Verfahren zur überprüfung einer signalverbindung - Google Patents
Verfahren zur überprüfung einer signalverbindungInfo
- Publication number
- EP4066114A1 EP4066114A1 EP20839127.6A EP20839127A EP4066114A1 EP 4066114 A1 EP4066114 A1 EP 4066114A1 EP 20839127 A EP20839127 A EP 20839127A EP 4066114 A1 EP4066114 A1 EP 4066114A1
- Authority
- EP
- European Patent Office
- Prior art keywords
- module
- relationships
- slot
- assigned
- modules
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
- G06F11/0703—Error or fault processing not based on redundancy, i.e. by taking additional measures to deal with the error or fault not making use of redundancy in operation, in hardware, or in data representation
- G06F11/0766—Error or fault reporting or storing
- G06F11/0772—Means for error signaling, e.g. using interrupts, exception flags, dedicated error registers
Definitions
- a method for checking a signal connection between a central unit and at least two modules is specified.
- a device, a rail vehicle, a computer program and a computer-readable storage medium are specified.
- One problem to be solved consists in specifying a method with which a signal connection can be checked particularly reliably. Furthermore, a device, a rail vehicle and a computer program are to be specified which can carry out such a method. In addition, a computer-readable storage medium is to be specified with the computer program.
- the signal connection is preferably designed to transmit at least one signal between the central unit and the modules. Furthermore, the signal connection is designed, for example, to transmit the signal between the modules.
- the signal connection is what it is preferably a bus system, in particular a field bus.
- the signal to be transmitted is, for example, at least one process signal.
- the central unit preferably also comprises a transmission unit.
- the central unit can be coupled to the signal connection through the transmission unit.
- Each module is preferably connected to at least one piece of equipment.
- a module that is assigned to an item of equipment is designed to exchange the process signal with the item of equipment assigned to the module.
- the operating means each include, for example, at least one actuator and / or at least one sensor.
- the process signal is, for example, at least one control signal and / or at least one measurement signal.
- the modules are interfaces to the operating resources of a technical process.
- the central unit generates the signal that is output to the operating resource by means of the signal connection and via the module to which a resource is assigned.
- the signal from the equipment is read into the central unit by means of the signal connection via the module assigned to the equipment.
- first relationships are provided between each module and an address of the slot that is to be assigned to the module.
- the first relationships are specified.
- the first relationships are specified on an external device, for example.
- the first relationships can be specified by a user.
- the first relationships correspond, for example, to a target state that specifies an assignment of one of the modules to one of the slots.
- the signal link connects the central unit to a first module and a second module.
- the first module is assigned to a first slot, for example, and the second module is assigned to a second slot.
- the first relationships are transmitted to the central unit.
- the first relationships are transmitted to the central unit by means of an external signal connection between the external device and the central unit.
- second relationships between each module and the address of the slot that is assigned to the module are determined. There is preferably exactly one second relationship between exactly one module and exactly one address of exactly one slot that is assigned to the module.
- the second relationships are preferably determined with a determination unit. In this case, the second relationships preferably correspond to an actual state that corresponds to an assignment of one of the modules to one of the slots.
- the second relationships between the module and the address of the slot assigned to the module are transferred to the module.
- the determination unit is connected to the signal connection.
- the determined second relationships are preferably transmitted to the modules by means of the signal connection between the determination unit and the modules.
- a second relationship between a module and the address of the slot assigned to the module is transferred to this module.
- exactly one second relationship between a module and the address of the slot assigned to the module is transferred to this module.
- the first relationships and the second relationships are compared.
- first relationship and in each case exactly one second relationship between a module and the address of the slot assigned to the module are compared with one another.
- first relationship of a module-slot combination is compared with the corresponding second relationship.
- the target state and the actual state are compared with one another.
- the central unit and / or the module can each have a checking unit which compares the first relationships and the second relationships with one another.
- the first relationship between the first module and the address of the first slot is compared with one another with the second relationship of the first module and the address of the first slot.
- an error signal is generated as a function of the comparison.
- the error signal is preferably designed to signal an error in the signal connection.
- the comparison preferably includes a comparison rule in which exactly one first relationship and exactly one second relationship between a module and the address of the slot assigned to the module are compared with one another. If the module-slot combination of the first relationship and the second relationship is the same, preferably no error signal is generated.
- the error signal is preferably generated when the first relationships are not the same as the second relationships. This means that the error signal is generated when the target state and the actual state differ.
- the error signal is preferably an electronic signal.
- the electronic signal is, for example, a request for action to be sent to a user.
- first relationships between each module and an address of the slot that is to be assigned to the module are provided.
- the first relationships are also transmitted to the central unit.
- second relationships between each module and the address of the slot assigned to the module are determined, and the second relationship is transmitted to the module between the module and the address of the slot assigned to the module. Furthermore, the matched the first relationships and the second relationships, and an error signal is generated as a function of the match.
- the method can in particular be carried out on a computer. Furthermore, the method is preferably carried out in the order specified in the previous paragraph. Particularly preferably, the provision of the first relationships and the determination of the second relationships can overlap in time. For example, the provision of the first relationships and the determination of the second relationships can take place at the same time.
- addressing errors can occur.
- An addressing error occurs, for example, when the central unit controls an item of equipment via one of the modules, but the signal connection is so faulty that another item of equipment is controlled via another module.
- addressing errors can be caused by operating errors, such as cabling errors in the signal connection or interchanging modules, or by hardware errors, such as defects in network components of the signal connection.
- an addressing error is countered by setting an address relationship between the central unit and each of the modules by means of a coding switch setting. If such an arrangement includes, for example, two modules of the same type, the address relationships are generally not unique. In this case, too, a possible interchanging of the modules is not automatically recognized.
- One idea of the present application is, among other things, to use the specified method to determine an additional address relationship between each module and an address of the slot assigned to the module in order to be able to check the signal connection particularly reliably. Since an address of the slot is uniquely assigned to each module, any addressing errors that result in modules being mixed up can be detected with advantage.
- the present method provides the first relationships and the second relationships through processes that are separate from one another.
- the first relationships are preferably specified by a user and the second relationships are preferably determined by the determination unit. In this way, systematic errors in the assignment of the modules to the respective slot addresses can advantageously be essentially excluded.
- the signal connection between the central unit and the modules is an unsecured communication channel.
- a secure signal connection is advantageously implemented without the signal connection itself ensuring this. This means that the central unit and the modules are responsible for safe operation of the signal connection using the method described here.
- the first relationships are stored on the central unit. That is, the first relationships are preferably transmitted from the external device via the signal connection to the central unit and stored there.
- the first relationships are preferably stored retentively on the central unit. This means that the first relationships are saved on the central unit even after a power failure.
- the first relationships are replaced by a first
- Transfer mechanism transferred to the central unit.
- the first transmission mechanism obeys a direct point-to-point transmission protocol or a universal serial interface protocol ("Universal Serial Interface Protocol", or USS Protocol for short).
- the second relationships between the module and the address of the slot assigned to the module are transmitted to the module by a second transmission mechanism.
- a second transmission mechanism Before the comparison of the first relationships and the second relationships, one of the second relationships is preferably stored on the assigned module, in particular stored temporarily.
- the second transmission mechanism obeys a Message Digest 5 (MD5) protocol, for example.
- MD5 protocol Message Digest 5
- the second transmission mechanism can, for example, be checked particularly easily for correctness.
- the first transmission mechanism is different from the second transmission mechanism.
- the first is defeated Transmission mechanism the point to point
- Transmission protocol or the USS protocol and the second transmission mechanism the MD5 protocol.
- the first relationships and the second relationships are thus transmitted in diverse ways, so that systematic errors that could occur when transmitting with the signal connection can at least be significantly reduced.
- the second relationships between each module and the address of the slot assigned to the module are stored on the module as a function of the comparison.
- first relationships and the second relationships are the same, one of the second relationships is stored retentively on the assigned module.
- the first relationships and the second relationships are thus advantageously available for active signal transmission via the signal connection.
- At least one of the modules is a virtual module.
- the virtual module is preferably a software application.
- each module has a coding switch with which the address relationship between the central unit and the module can be set.
- coding switches can advantageously be dispensed with.
- the modules can therefore also be virtual modules. That is to say, in the case of the modules, this can also advantageously be the case in the present method be software components such as software applications.
- At least one of the slots is a virtual slot. If the module is a virtual module, the slot assigned to the module can be a virtual slot.
- each first relationship has a first data structure during transmission.
- each first relationship has, for example, the first data structure that is specified by the direct point-to-point transmission protocol or the USS protocol.
- every second relationship has a second data structure during transmission.
- a hash value is generated from every second relationship to be transmitted.
- a 128-bit hash value is generated from every second relationship to be transmitted.
- the first data structures are different from the second data structures.
- the first data structures of the first relationships and the second data structures of the second relationships are therefore different from one another during transmission.
- systematic errors in the transmission via the signal connection can essentially be excluded in this way.
- a device for checking the signal connection is specified, the device being designed to carry out the method described here. All of the features and embodiments disclosed in connection with the method can therefore also be embodied in connection with the device and vice versa.
- the device comprises a first signal connection which is designed to transmit at least one signal between a central unit and modules and / or between modules.
- the device comprises the central unit, which is designed to process the signal. Furthermore, the central unit is preferably designed to output and / or detect the signal.
- the device comprises the modules which are each assigned to a slot.
- the device comprises at least two operating means, the modules being designed to exchange at least one process signal with the operating means.
- the signal is preferably the process signal.
- a rail vehicle which has the device described here. All of the features and embodiments disclosed in connection with the device can therefore also be configured in connection with the rail vehicle and vice versa.
- a computer program is specified, comprising instructions which, when the computer program is executed by a computer, cause the computer to carry out the method described here.
- a computer-readable storage medium is specified on which the computer program is stored.
- FIG. 5 a flow chart of a method according to an exemplary embodiment
- FIG. 6, a schematic representation of a method according to an exemplary embodiment
- Figure 7 a schematic representation of a rail vehicle according to an embodiment.
- the device 1 according to the exemplary embodiment in FIG. 1 comprises a central unit 3 which is connected to two modules 4 via a signal connection 2.
- the signal connection 2 is designed to transmit signals between the central unit 3 and the modules 3, as well as signals between the modules 3.
- each of the modules 4 transmits signals to a respective operating means 8 which is assigned to exactly one of the modules 4.
- Each module 4 is assigned to exactly one slot 5.
- the central unit 3 is here connected to a first module 15 and a second module 16 via the signal connection 2.
- the first module 15 is also connected to a first operating means 19 and the second module 16 is connected to a second operating means 20. Furthermore, the first module 15 is assigned to a first slot 17 and the second module 16 is assigned to a second slot 18.
- the central unit 3 comprises first relationships 11 between each module 4 and the address of the slot 5 which is assigned to the module 4. That is, the central unit 3 comprises two first relationships 11.
- the first relationships 11 here comprise, for example, a relationship A 21 and a relationship B 22.
- the relationship A 21 is a relationship between the first module 15 and the address of the first slot 17.
- the Relationship B 22 is a relationship between the second module 16 and the address of the second slot 18.
- each module 4 comprises a second relationship 12 between the module 4 and the address of the slot 5 which is assigned to the module 4.
- the second relationships 12 here include, for example, the relationship A 21 and the relationship B 22.
- the first module 15 includes the relationship A 21 and the second module 16 includes the relationship B 22.
- the central unit 3 further comprises, for example, a transmission unit 6.
- the central unit 3 can be coupled to the signal connection 2 through the transmission unit 6.
- the modules 4 are combined to form a system 9, in particular a common system.
- the system 9 comprises the first slot 17 to which the first module 15 is assigned and the second slot 18 to which the second module 16 is assigned.
- the system 9 can furthermore comprise a test unit 7.
- the checking unit 7 is designed to compare the first relationships 11 and the second relationships 12 with one another.
- signals can be transmitted particularly safely from the central unit 3 to the modules 4 via the signal connection 2.
- the first operating means 19 can be controlled and / or read out. That is to say, by means of the first module 15, the first operating means 19 is controlled and / or read out by the first application 25. With a second application 25 can for example, the second operating means 20 can be controlled and / or read out. If the first operating means 19 is controlled, for example, by the first application 25, the central unit 3 outputs a signal by which the first operating means 19 is activated, for example. As a result of the clear assignment of the first module 15 to the first slot 17, the signal can be reliably transmitted to the first operating means 19. In particular, the secure transmission is ensured by the storage of the relationship A 21 in the central unit 3 and the storage of the relationship A 21 in the first module 15.
- the modules 4 in the exemplary embodiment in FIG. 2 are not arranged in a common system 9.
- the device includes
- the first system 23 comprises a first module 15 and the second system 24 comprises a second module 16.
- the first system 23 and the second system 24 are connected to a central unit 3 by a signal connection 2.
- a first module 15 and a second module 16 in contrast to the exemplary embodiment in FIG. 1, are for example due to a malfunction of a signal connection
- the first module 15 is incorrectly assigned to a second slot 18 and the second module 16 is incorrectly assigned to a first slot 17.
- the first module 15 is therefore still incorrectly connected to a second operating means 20 and the second module 16 is incorrectly connected to a first operating means 19.
- first operating means 19 is controlled, for example, by a first application 25, a relationship A 21 is assigned to a signal, according to which relationship A 21 indicates a relationship between the first module 15 and an address of the first slot 17.
- first slot 17 comprises the second module 16.
- a relationship B 22 is stored in the second module 16. In this case, a comparison of the relationships 10, namely the relationship A 21 and the relationship B 22, shows that these are not the same. The error can thus be identified through the comparison.
- the error can advantageously be identified by comparing the first relationships 11 and the second relationships 12.
- the signal connection 2 in the exemplary embodiment in FIG. 4 between the one between a central unit 3 and modules 4 is faulty.
- the modules 4 are also interchanged here. That is, a first module 15 is incorrectly assigned to a second slot 18 and a second module 16 is incorrectly assigned to a first slot 17.
- a second method step S2 exactly one second relationship 12 between exactly one module 4 and exactly one address of the slot 5 that is assigned to the module 4 is determined.
- the first relationships 11 are transmitted to a central unit 3 in a further method step S3 by means of a first transmission mechanism.
- the first relationships 11 are subsequently stored on the central unit 3.
- one of the second relationships 12 between a module 4 and the address of the slot 5 assigned to the module is transmitted by a second transmission mechanism to the module 4 after the second relationships 12 have been determined in a further method step S4.
- the second relationships 12 it is possible, for example, for the second relationships 12 to be temporarily stored on the modules 4.
- step S5 the first relationships 11 and the second relationships 12 are compared.
- the error signal is here for example, that a first module 15 is incorrectly not assigned to the first slot 17.
- step S7 the second relationships 12 between a module 4 and the address of the slot 5 assigned to the module 4 can be stored on the module 4, in particular remanently.
- a first relationship 11 between a module 4 and an address of a slot 5, which is to be assigned to the module 4, is provided on an external device 14.
- the first relationships 11 are specified here, for example, by a user on the external device 11.
- ten slots 5 are specified, with a module 4 being assigned to each of the slots 5. That is to say, ten first relationships 11 are provided, each of which forms a relationship between a module 4 and an address of the slot 5 to which the module 4 is to be assigned.
- the ten first relationships 11 are each identified by a character combination, 1231, 1232, ..., 123A, 123B.
- the ten modules 4 thus each have a unique first relationship 11.
- the first relationships 11 are then transmitted to the central unit 3 through an external signal connection 27.
- the external signal connection 27 can be removed again after the transmission.
- the first relationships 11 are stored in the present case on the central unit 3.
- a second relationship 12 between a module 4 and the address of the slot 5, which is assigned to the module 4 is determined by a determination unit 13.
- the device 1 comprises a system 9 with ten slots 5.
- a module 4 is assigned to each of the slots 5. That is, the determination unit 13 determines ten second relationships 12 between each module 4 and an address of the slot 5 to which the module 4 is to be assigned.
- the ten second relationships 12 are each identified by a character combination, 1231, 1232, 1233, 1234, 1235, 2136, 1237, 1238, 1239, 123A, 123B.
- a module 4 is assigned to each address of the slot 5 and a second relationship 12 is thus determined in each case.
- one of the second relationships 12 between the module 4 and the address of the slot 5 assigned to the module 4 is transmitted to the module 4 by a signal connection 2.
- the ten modules 4 thus each have a unique second relationship 12.
- the signal connection 2 can by comparing the clear first relationship 11 between the module 4 to be addressed and the address of the slot 5, which is to be assigned to the module 4 to be addressed, and the clear second relationship 12 between the module 4 to be addressed and the address of the slot 5, which is assigned to the module 4 to be addressed, are executed particularly securely.
- the rail vehicle 28 according to the exemplary embodiment in FIG. 7 comprises a device 1 with which a method according to the exemplary embodiment in FIG. 5 can be carried out.
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Small-Scale Networks (AREA)
- Quality & Reliability (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
Abstract
Description
Claims
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| DE102020201092.7A DE102020201092A1 (de) | 2020-01-30 | 2020-01-30 | Verfahren zur Überprüfung einer Signalverbindung |
| PCT/EP2020/088026 WO2021151612A1 (de) | 2020-01-30 | 2020-12-30 | Verfahren zur überprüfung einer signalverbindung |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| EP4066114A1 true EP4066114A1 (de) | 2022-10-05 |
Family
ID=74175875
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| EP20839127.6A Pending EP4066114A1 (de) | 2020-01-30 | 2020-12-30 | Verfahren zur überprüfung einer signalverbindung |
Country Status (3)
| Country | Link |
|---|---|
| EP (1) | EP4066114A1 (de) |
| DE (1) | DE102020201092A1 (de) |
| WO (1) | WO2021151612A1 (de) |
Family Cites Families (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7948120B2 (en) | 2008-12-02 | 2011-05-24 | Lockheed Martin Corporation | Modular power distribution backplane, system, and method |
| EP2233991A1 (de) * | 2009-03-25 | 2010-09-29 | Siemens Aktiengesellschaft | Sicherheitsgerichtetes Automatisierungssystem mit automatischer Adresswiederherstellung |
-
2020
- 2020-01-30 DE DE102020201092.7A patent/DE102020201092A1/de active Pending
- 2020-12-30 EP EP20839127.6A patent/EP4066114A1/de active Pending
- 2020-12-30 WO PCT/EP2020/088026 patent/WO2021151612A1/de not_active Ceased
Also Published As
| Publication number | Publication date |
|---|---|
| DE102020201092A1 (de) | 2021-08-05 |
| WO2021151612A1 (de) | 2021-08-05 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| EP1352326B1 (de) | Verfahren und vorrichtung zur überwachung einer datenverarbeitung und -übertragung | |
| DE69123663T2 (de) | Kanäle in einem Rechnerein-Ausgabesystem | |
| EP2160857B1 (de) | Prüfverfahren und elektronische schaltung zur sicheren seriellen übertragung von daten | |
| EP3177973B1 (de) | Verfahren zum betreiben einer sicherheitssteuerung und automatisierungsnetzwerk mit einer solchen sicherheitssteuerung | |
| EP0974901B1 (de) | Verfahren zur Ermittlung einer einheitlichen globalen Sicht vom Systemzustand eines verteilten Rechnernetzwerkes | |
| EP1639465A2 (de) | Verfahren zur überwachung des programmlaufs in einem mikro-computer | |
| EP3412018B1 (de) | Verfahren zum austausch von nachrichten zwischen sicherheitsrelevanten vorrichtungen | |
| DE10305415B4 (de) | Verfahren und Vorrichtung zum medienredundanten Betreiben eines Endgeräts in einem Netzwerk | |
| DE102016208869A1 (de) | Verfahren zum Betreiben einer Datenverarbeitungsvorrichtung für ein Fahrzeug | |
| DE102010028485B4 (de) | Verfahren und Vorrichtung zur Absicherung von über eine Schnittstelle zu übertragenden Datenpaketen | |
| DE102021127310B4 (de) | System und Verfahren zur Datenübertragung | |
| WO2021151612A1 (de) | Verfahren zur überprüfung einer signalverbindung | |
| EP0977395A1 (de) | Verfahren zur sicheren einkanaligen Uebertragung von Daten zwischen den Rechnerknoten eines Rechnerverbundes sowie Rechnerverbund und Rechnerknoten | |
| EP0182134A2 (de) | Verfahren zum Betrieb eines signaltechnisch sicheren Mehrrechnersystems mit mehreren signaltechnisch nicht sicheren Ein/Ausgabebaugruppen | |
| DE102019110884A1 (de) | Verfahren zur Änderung einer Steuerungssoftware eines Automatisierungssystems | |
| DE102022212451A1 (de) | Verfahren und Gerät zur Fahrzeugdiagnoseprüfung | |
| EP3550748A1 (de) | Verfahren zur erkennung von datenverfälschungen bei einer datenübertragung über eine fehlersichere kommunikationsverbindung | |
| DE102020209363A1 (de) | Verfahren und sicherheitsgerichtetes System zum Ausführen von Sicherheitsfunktionen | |
| DE102022211587B4 (de) | Sicherer Betrieb von redundanten, einfehlertoleranten Steuergeräten im Fahrzeug mit signierten Signalen | |
| DE102010039782A1 (de) | Verfahren zur Durchführung einer Kommunikation | |
| DE102015214133B4 (de) | Integrierter Schaltkreis zum Betreiben an einem Bus und Verfahren zum Betreiben des integrierten Schaltkreises | |
| DE102012100818B3 (de) | Verfahren zur Datenübertragung in einem Feldbussystem | |
| WO1998038577A1 (de) | Redundant aufgebautes elektronisches gerät mit zertifizierten und nicht zertifizierten kanälen | |
| EP4677812A1 (de) | Brücken-feldbusmodul und verfahren zum betreiben eines brücken-feldbusmoduls | |
| DE102006042131B4 (de) | Rechnersystem |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: UNKNOWN |
|
| STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: THE INTERNATIONAL PUBLICATION HAS BEEN MADE |
|
| PUAI | Public reference made under article 153(3) epc to a published international application that has entered the european phase |
Free format text: ORIGINAL CODE: 0009012 |
|
| STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: REQUEST FOR EXAMINATION WAS MADE |
|
| 17P | Request for examination filed |
Effective date: 20220628 |
|
| AK | Designated contracting states |
Kind code of ref document: A1 Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR |
|
| DAV | Request for validation of the european patent (deleted) | ||
| DAX | Request for extension of the european patent (deleted) | ||
| STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: EXAMINATION IS IN PROGRESS |
|
| 17Q | First examination report despatched |
Effective date: 20250312 |
|
| RAP3 | Party data changed (applicant data changed or rights of an application transferred) |
Owner name: SIEMENS MOBILITY GMBH |