# US 10,372,848 B2 · Method and apparatus for providing a safe operation of a technical system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,372,848 B2 - Document ID: US10372848B2 - Status: Granted - Kind: B2 - Application number: 15/601,053 - Filed: 2017-05-22 - Published: 2017-11-30 - Granted: 2019-08-06 - Earliest claimed: 2016-05-25 - Assignees: Siemens Aktiengesellschaft - Applicants: Siemens Aktiengesellschaft - Inventors: Kai Höfig; Marc Zeller - Web page: https://patentgrep.com/patent/US10372848B2 ## CPC - G05B 23/0251: {Abstraction hierarchy, e.g. "complex systems", i.e. system is divided in subsystems, subsystems are monitored and results are combined to decide on status of whole system} - G06F 16/322: {Trees} - G06F 30/20: Design optimisation, verification or simulation (optimisation, verification or simulation of circuit designs G06F30/30) - G06F 30/00: Computer-aided design [CAD] - G05B: CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS (systems for controlling or regulating non-electric variables G05D; systems for regulating electric or magnetic variables G05F; control devices or systems insofar as characterised by mechanical features only G05G) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A method and an apparatus for providing a safe operation of a technical system including a plurality of system components. The method includes the steps of: a) providing a safety analysis model matured by knowledge about former implementations of the respective system components in different context, b) whereby system components' dependencies are modeled by connecting inports with outports of the respective system components and/or vice versa, c) whereby at least one or a plurality of such in and/or outports are associated with input failure modes and/or output failure modes, d) characterized in automatically uncovering inconsistencies caused by at least one system component to be integrated in connection with at least another system component whereby the input and/or output failure mode of the system component carries the knowledge from another implementation into the context. ## Claims ### Claim 1 A method for providing a safe operation of a technical system comprising a plurality of system components, the technical system including a computing system having a computer readable storage medium, the method comprising: a) providing, by the computing system, a safety analysis model of the technical system matured by knowledge about former implementations of the respective system components in different contexts; b) whereby dependencies of the system components are modelled by connecting inports with outports of the respective system components and/or by connecting outports with inports of the respective system components; c) whereby the inports and/or outports of each system component are associated with input failure modes and/or output failure modes of the respective system components; d) automatically uncovering inconsistencies caused by at least one new system component to be integrated in connection with at least another downstream system component or upstream system component of an existing technical system, whereby the input failure modes and/or output failure modes of the system component to be integrated carries the knowledge from another implementation into a new context; e) wherein for a system component to be integrated into the existing technical system, the failure modes which require integration and unconnected failure modes of the system component to be integrated are identified using a previously defined set forward which identifies unconnected failure modes of the system component to be integrated, whereby existing knowledge of the system component to be integrated is transferred into a new technical system where the component to be integrated is reused; f) wherein for the system component to be integrated into the existing technical system, unconnected failure modes of the system component to be integrated are identified using a previously defined set backward which contains unconnected failure modes of the existing system components where the system component is to be integrated; g) whereby existing knowledge of the existing system is transferred back to the reused system component of the technical system, whereby existing instances of the reused system component in other systems or implementations are reviewed. ### Claim 2 (depends on 1) The method according to claim 1, wherein maturation of the safety analysis model is effected when the system component to be integrated is reused. ### Claim 3 (depends on 1) The method according to claim 1, wherein the safety analysis model is represented by a component fault tree comprising a plurality of component fault tree elements, whereby each of the plurality of component fault tree elements comprises at least one component fault tree mode element representing an input failure mode or an output failure mode of the system component to be integrated which is represented by its component fault tree element. ### Claim 4 (depends on 1) The method according to claim 1, wherein the inconsistencies are detected at the inports and outports of the respective system components. ### Claim 5 (depends on 1) The method according to claim 1, wherein the knowledge about former implementations of the system components is stored in a repository. ### Claim 6 (depends on 1) A computer program product directly loadable into the internal memory of a computer, comprising software code portions for performing the steps of claim 1 when said computer program product is running on a computer. ### Claim 7 A computing system comprising a computer readable storage medium for providing a safe operation of a technical system comprising a plurality of system components, comprising: a) a modelling unit of the computing system for providing a safety analysis model of the technical system matured by knowledge about former implementations of the respective system components in different contexts; b) whereby dependencies of system components dependencies are modelled by connecting inports with outports of the respective system components or by connecting outports with inports of the respective system components; c) whereby the inports and/or outports of each system component are associated with input failure modes and/or output failure modes of the respective system component; d) an analysis unit of the computing system for automatically uncovering inconsistencies caused by at least one new system component to be integrated in connection with at least another downstream system component or upstream system component of an existing technical system, whereby the input failures modes and/or output failure modes of the system component to be integrated carries the knowledge from another implementation into a new context; e) wherein for a system component to be integrated into the existing technical system, the failure modes which require integration and unconnected failure modes of the system component to be integrated are identified using a previously defined set forward which identifies unconnected failure modes of the system component to be integrated, whereby existing knowledge of the system component to be integrated is transferred into a new technical system where the component to be integrated is reused; f) wherein for the system component to be integrated into the existing technical system, unconnected failure modes of the system component to be integrated are identified using a previously defined set backward which contains unconnected failure modes of the existing system components where the system component is to be integrated; g) whereby existing knowledge of the existing system is transferred back to the reused system component of the technical system, whereby existing instances of the reused system component in other systems or implementations are reviewed. ### Claim 8 (depends on 7) The apparatus according to claim 7, wherein maturation of the safety analysis model is effected when the system component to be integrated is reused. ### Claim 9 (depends on 7) The apparatus according to claim 7, wherein the safety analysis model is represented by a component fault tree comprising a plurality of component fault tree elements, whereby each of the component fault tree elements comprises at least one component fault tree mode element representing a failure mode of the system component which is represented by the component fault tree element. ### Claim 10 (depends on 7) The apparatus according to claim 7, wherein the inconsistencies are detected at the inports and outports of the respective system components. ### Claim 11 (depends on 7) The apparatus according to claim 7, wherein said knowledge about former implementations of the system components is stored in a repository.