Loading patent…
OwnerAnthony Rowe, Arne Hamann +3inventors
InventorsAnthony Rowe, Arne Hamann, Dakshina Narahari Dasari, Franz-Josef Grosch, Nuno Pereira
Estimating the term…
A method for embedding at least one application in a real-time environment, the real-time environment being provided by a programmable logic controller. The method includes receiving the at least one application, the at least one application being received as an intermediate representation; providing a sandbox for the at least one received application; executing the at least one sandboxed application, the executing being carried out based on an interpretation of the at least one sandboxed application using a virtualization runtime of the real-time environment, the intermediate representation being augmented by the runtime to provide at least one real-time and/or safety function for the at least one sandboxed application.
1-10. (canceled)
A method (100) for embedding at least one application (20) in a real-time environment, the real-time environment being provided by a programmable logic controller (31), comprising the following steps:
The method (100) of any one of the preceding claims, characterized in that the augmentation of the intermediate representation by the runtime (35) comprises injecting monitoring and/or assertion code into the intermediate representation to provide the at least one real-time and/or safety function, particularly to detect and prevent faults and attacks, wherein preferably different versions of the sandboxed application (20) are generated and executed redundantly.
The method (100) of any one of the preceding claims, characterized in that the runtime (35) provides a multiprogramming environment for performing the execution of multiple of the at least one sandboxed application (20) at the same time.
The method (100) of any one of the preceding claims, characterized in that the runtime (35) is configured to provide a software fault isolation between the sandboxed application (21) and further applications (20) running in the real-time environment and/or between the multiple sandboxed applications (21).
The method (100) of any one of the preceding claims, characterized in that a system interface (36) is provided to allow the sandboxed application (21) a controlled access to resources in an industrial control system (5).
The method (100) of any one of the preceding claims, characterized in that multiple versions of the sandboxed application (21) are executed by the runtime (35), a runtime (35) voting mechanism being provided to check results of the multiple versions, particularly to provide redundancy of the sandboxed application (21).
The method (100) of any one of the preceding claims, characterized in that the sandboxed application (21) is configured as a safety-relevant application (20), particularly for automatically controlling a vehicle (3).
A computer program (20), comprising instructions which, when the computer program (20) is executed by a computer, cause the computer to carry out the method (100) of any one of the preceding claims.
A method for embedding at least one application in a real-time environment, the real-time environment being provided by a programmable logic controller, the method comprising the following steps:
A non-transitory computer-readable medium on which is stored a computer program instructions for embedding at least one application in a real-time environment, the real-time environment being provided by a programmable logic controller, the instructions, when executed by a computer, causing the computer to perform the following steps:
A data processing apparatus, comprising:
Dependencies are inferred from the claim text.