公开(公告)号：US09954864B2

公开(公告)日：2018-04-24

申请号：US15048022

申请日：2016-02-19

申请人： Kai Höfig

发明人： Kai Höfig

IPC分类号： H04L29/06 ,  G06F21/71

CPC分类号： H04L63/10 ,  G06F21/71

摘要： A safety apparatus for providing a safe operation of a subsystem within a safety critical system, SCS is disclosed herein. The safety apparatus includes: a system communication interface for communication with components of the subsystem and other subsystems of the safety critical system; a backend communication interface for communication with a safety cloud backend; an integrated identifier memory storing a unique identifier of the subsystem; and an authorization control unit configured to perform a handshake authorization procedure with another target subsystem of the safety critical system via the system communication interface, and with the safety cloud backend via the backend communication interface to get authorization for the subsystem to execute a safety critical function on the target subsystem of the safety critical system based on the unique identifiers of both subsystems.

公开(公告)号：US20150269013A1

公开(公告)日：2015-09-24

申请号：US14256673

申请日：2014-04-18

申请人： Kai Höfig

发明人： Kai Höfig

IPC分类号： G06F11/07

CPC分类号： G06F11/079 ,  G06Q10/04 ,  G06Q10/101

摘要： A method for supporting failure mode and effects analysis includes storing a meta-model in a computer-readable storage medium. The meta-model includes generic parts of technical systems, generic failure modes, and associations between the generic parts and the generic failure modes. The associations indicate, for each generic part, one or more generic failure modes associated with the generic part. Each generic failure mode identifies a type of failure for a respective generic part. A processor instantiates the generic parts and the generic failure modes to generate part instances and failure mode instances specifying a technical system. The part instances and the failure mode instances are stored, such as in the computer-readable storage medium.

摘要翻译： 用于支持故障模式和效果分析的方法包括将元模型存储在计算机可读存储介质中。 元模型包括技术系统的通用部分，通用故障模式以及通用部件与通用故障模式之间的关联。 关联为每个通用部分指示与通用部分相关联的一个或多个通用故障模式。 每个通用故障模式识别相应通用部件的故障类型。 处理器实例化通用部件和通用故障模式，以生成指定技术系统的零件实例和故障模式实例。 部件实例和故障模式实例被存储，例如在计算机可读存储介质中。

公开(公告)号：US09483342B2

公开(公告)日：2016-11-01

申请号：US14256673

申请日：2014-04-18

申请人： Kai Höfig

发明人： Kai Höfig

IPC分类号： G06F11/07 ,  G06Q10/04 ,  G06Q10/10

CPC分类号： G06F11/079 ,  G06Q10/04 ,  G06Q10/101

摘要： A method for supporting failure mode and effects analysis includes storing a meta-model in a computer-readable storage medium. The meta-model includes generic parts of technical systems, generic failure modes, and associations between the generic parts and the generic failure modes. The associations indicate, for each generic part, one or more generic failure modes associated with the generic part. Each generic failure mode identifies a type of failure for a respective generic part. A processor instantiates the generic parts and the generic failure modes to generate part instances and failure mode instances specifying a technical system. The part instances and the failure mode instances are stored, such as in the computer-readable storage medium.

摘要翻译： 用于支持故障模式和效果分析的方法包括将元模型存储在计算机可读存储介质中。 元模型包括技术系统的通用部分，通用故障模式以及通用部件与通用故障模式之间的关联。 关联为每个通用部分指示与通用部分相关联的一个或多个通用故障模式。 每个通用故障模式识别相应通用部件的故障类型。 处理器实例化通用部件和通用故障模式，以生成指定技术系统的零件实例和故障模式实例。 部件实例和故障模式实例被存储，例如在计算机可读存储介质中。

公开(公告)号：US09798605B2

公开(公告)日：2017-10-24

申请号：US14461936

申请日：2014-08-18

申请人： Kai Höfig

发明人： Kai Höfig

IPC分类号： G06F11/00 ,  G06F11/07

CPC分类号： G06F11/079 ,  G06F11/0709

摘要： The embodiments relate to methods and systems for supporting a global effect analysis of a technical system. The embodiments include providing a meta-model stored in a computer readable storage medium, where the meta-model comprises at least one assembly of the technical system comprising parts having an associated set of failure mode elements, and where each failure mode element has an associated local effect element. The embodiments also include clustering local effect elements within global effect elements to generate a global effect tree stored within the meta-model.

公开(公告)号：US20160266952A1

公开(公告)日：2016-09-15

申请号：US14644119

申请日：2015-03-10

申请人： Kai Höfig ,  MarC Zeller

发明人： Kai Höfig ,  MarC Zeller

IPC分类号： G06F11/07

CPC分类号： G06F11/079 ,  G06F11/00 ,  G06F11/004 ,  G06F11/0736 ,  G06F11/0751

摘要： A method for automated qualification of a safety critical system including a plurality of components is provided. A functional safety behavior of each component is represented by an associated component fault tree element. The method includes automatically performing a failure port mapping of output failure modes to input failure modes of component fault tree elements based on a predetermined generic fault type data model stored in a database.

摘要翻译： 提供了一种用于包括多个部件的安全关键系统的自动鉴定的方法。 每个组件的功能安全行为由关联组件故障树元素表示。 该方法包括基于存储在数据库中的预定的通用故障类型数据模型，自动执行输出故障模式的故障端口映射以输入部件故障树元件的故障模式。

公开(公告)号：US20160171506A1

公开(公告)日：2016-06-16

申请号：US14586818

申请日：2014-12-30

申请人： Kai Höfig

发明人： Kai Höfig

IPC分类号： G06Q30/00 ,  G06Q50/26 ,  G06Q10/06

CPC分类号： G06Q30/018 ,  G06Q10/067 ,  G06Q50/265

摘要： A method for automated recertification of a safety critical system with at least one altered functionality is provided. The method includes providing a failure propagation model of the safety critical system. The method also includes updating the failure propagation model of the safety critical system according to the at least one altered functionality using inner port dependency traces between inports and outports of a failure propagation model element representing the at least one altered functionality. The method includes calculating top events of the updated failure propagation model, and comparing the calculated top events with predetermined system requirements to recertify the safety critical system.

摘要翻译： 提供了一种用于自动重新认证具有至少一个改变的功能的安全关键系统的方法。 该方法包括提供安全关键系统的故障传播模型。 该方法还包括根据所述至少一个改变的功能，使用表示所述至少一个改变的功能的故障传播模型元素的入口和出口之间的内部端口依赖性跟踪来更新安全关键系统的故障传播模型。 该方法包括计算更新的故障传播模型的顶部事件，以及将计算的顶部事件与预定的系统要求进行比较以重新认证安全关键系统。

公开(公告)号：US10796315B2

公开(公告)日：2020-10-06

申请号：US14586818

申请日：2014-12-30

申请人： Kai Höfig

发明人： Kai Höfig

IPC分类号： G06Q30/00 ,  G06Q10/06 ,  G06Q50/26

摘要： A method for automated recertification of a safety critical system with at least one altered functionality is provided. The method includes providing a failure propagation model of the safety critical system. The method also includes updating the failure propagation model of the safety critical system according to the at least one altered functionality using inner port dependency traces between inports and outports of a failure propagation model element representing the at least one altered functionality. The method includes calculating top events of the updated failure propagation model, and comparing the calculated top events with predetermined system requirements to recertify the safety critical system.

公开(公告)号：US10061670B2

公开(公告)日：2018-08-28

申请号：US14981673

申请日：2015-12-28

申请人： Kai Höfig ,  Marc Zeller

发明人： Kai Höfig ,  Marc Zeller

IPC分类号： G06F11/22 ,  G06F11/07 ,  G06F17/30

CPC分类号： G06F11/2257 ,  G06F11/008 ,  G06F11/0721 ,  G06F11/0736 ,  G06F11/0769 ,  G06F11/079 ,  G06F11/2252 ,  G06F16/22

摘要： An apparatus includes an input that receives a continuous function chart for each component of the investigated safety-critical system. A processor generates a corresponding component fault tree element. Inports and outports of the component fault tree element are generated and interconnected based on unique names of the inputs and outputs of the corresponding continuous function chart of the respective system component. Input failure modes and output failure modes are generated based on generic mapping between connector types of the continuous function chart and failure types of failure modes of the component fault tree element. The input failure modes of a component fault tree element are connected to output failure modes of the component fault tree element via internal failure propagation paths based on interconnected function blocks of the continuous function chart of the respective system component. An output outputs the generated component fault tree of the safety-critical system.

公开(公告)号：US20170185470A1

公开(公告)日：2017-06-29

申请号：US14981673

申请日：2015-12-28

申请人： Kai Höfig ,  Marc Zeller

发明人： Kai Höfig ,  Marc Zeller

IPC分类号： G06F11/07 ,  G06F17/30

CPC分类号： G06F11/2257 ,  G06F11/008 ,  G06F11/0721 ,  G06F11/0736 ,  G06F11/0769 ,  G06F11/079 ,  G06F11/2252 ,  G06F17/30312

摘要： An apparatus includes an input that receives a continuous function chart for each component of the investigated safety-critical system. A processor generates a corresponding component fault tree element. Inports and outports of the component fault tree element are generated and interconnected based on unique names of the inputs and outputs of the corresponding continuous function chart of the respective system component. Input failure modes and output failure modes are generated based on generic mapping between connector types of the continuous function chart and failure types of failure modes of the component fault tree element. The input failure modes of a component fault tree element are connected to output failure modes of the component fault tree element via internal failure propagation paths based on interconnected function blocks of the continuous function chart of the respective system component. An output outputs the generated component fault tree of the safety-critical system.

公开(公告)号：US20160248775A1

公开(公告)日：2016-08-25

申请号：US15048022

申请日：2016-02-19

申请人： Kai Höfig

发明人： Kai Höfig

IPC分类号： H04L29/06

CPC分类号： H04L63/10 ,  G06F21/71

摘要： A safety apparatus for providing a safe operation of a subsystem within a safety critical system, SCS is disclosed herein. The safety apparatus includes: a system communication interface for communication with components of the subsystem and other subsystems of the safety critical system; a backend communication interface for communication with a safety cloud backend; an integrated identifier memory storing a unique identifier of the subsystem; and an authorization control unit configured to perform a handshake authorization procedure with another target subsystem of the safety critical system via the system communication interface, and with the safety cloud backend via the backend communication interface to get authorization for the subsystem to execute a safety critical function on the target subsystem of the safety critical system based on the unique identifiers of both subsystems.

摘要翻译： 本文公开了一种用于在安全关键系统SCS内提供子系统的安全操作的安全装置。 安全装置包括：用于与子系统的组件和安全关键系统的其他子系统进行通信的系统通信接口; 用于与安全云后端通信的后端通信接口; 存储子系统的唯一标识符的集成标识符存储器; 以及授权控制单元，被配置为经由所述系统通信接口与所述安全关键系统的另一目标子系统执行握手授权过程，并且经由所述后端通信接口与所述安全云后端执行握手授权过程，以获得所述子系统的授权以执行安全关键功能 基于两个子系统的唯一标识符在安全关键系统的目标子系统上。