Some embodiments provide a method for a network controller that manages multiple managed forwarding elements (MFEs) that implement multiple logical networks. The method stores (i) a first data structure including an entry for each logical entity in a desired state of the multiple logical networks and (ii) a second data structure including an entry for each logical entity referred to by an update for at least one MFE. Upon receiving updates specifying modifications to the logical entities, the method adds separate updates to separate queues for the MFEs that require the update. The separate updates reference the logical entity entries in the second data structure. When the second data structure reaches a threshold size in comparison to the first data structure, the method compacts the updates in at least one of the queues so that each queue has no more than one update referencing a particular logical entity entry.

A gateway device is connected via one or more networks to electronic controllers on-board a vehicle. The gateway device includes one or more memories, and circuitry that acquires firmware update information. The circuitry determines whether or not a first electronic controller satisfies a second condition based on second information about the first electronic controller, where the second information is whether the first electronic controller includes a firmware cache for performing a pre-update firmware cache operation. The circuitry also causes, when the second condition is not satisfied, the gateway device to execute a proxy process, where the gateway device requests the first electronic controller to transmit boot ROM data to the gateway device, creates updated boot ROM data with the updated firmware, and transmits the updated boot ROM data to the first electronic controller that updates the boot ROM and resets the first electronic controller with the updated firmware.

An example method includes receiving an indication of a selection of a first application environment that includes a first virtual environment associated with a first security domain and is configured to isolate execution of software applications within the first application environment, suspending execution of a second application environment that includes a second virtual environment associated with a second security domain different from the first security domain, initiating execution of the first application environment, identifying information associated with the first security domain and provided by the first application environment that is to be sent to an external computing device associated with the first security domain, selecting communication network(s) from one or more communication networks that are each available to the mobile computing device for data communication, encrypting, based on the first security domain and network(s), the information, and sending, to the external computing device via the network(s), the encrypted information.

Systems, apparatuses, and methods for wirelessly updating electronic control unit configuration can include determining operation parameters to be changed of an electronic control unit of an equipment, and generating a write package including the operating parameters to be changed. The systems, apparatuses, and methods include transmitting the write package to the equipment. The write package causes the electronic control unit to change the operation parameters upon verifying that the operation parameters are applicable to the equipment based on values of the parameters. In response to determining that the operation parameters are not applicable to the equipment, the write package can be discarded.

Wireless communication enabled circuit breakers are described. Methods associated with such wireless communication enabled circuit breakers are also described. The wireless communication enabled circuit breakers may controlled by a remote entity. The remote entity may wirelessly case the wireless communication enabled circuit breakers to trip.

Various systems and methods are provided for implementing a software defined industrial system. In an example, self-descriptive control applications and software modules are provided in the context of orchestratable distributed systems. The self-descriptive control applications may be executed by an orchestrator or like control device, configured to: identify available software modules adapted to perform functional operations in a control system environment; identify operational characteristics that identify characteristics of execution of the available software modules that are available to implement a control system application; select a software module for execution based on the operational configuration and the operational characteristics identified in the manifest; and cause the execution of the selected software module in the control system environment based on an application specification for the control system application.

A mechanisms for analyzing event based behavior of end-points of a network in an industrial system and a method performed by a control node, the method includes collecting, from the end-points, timestamped event log entries as created by the end-points within a time window. Each respective timestamped event log entry pertains to a respective event performed by one of the end-points. The method includes identifying tuples of correlated events by comparing the timestamped event log entries to each other, thereby providing a mapping between the events and those end-points where the events of each tuple of correlated events are performed.

A method for authenticating and updating an eUICC firmware version includes receiving first information sent by a terminal device, where the first information includes a target identifier. The method further includes searching a currently stored event record for a target event record, where a group event identifier in the target event record matches the target identifier in the first information. The method further includes sending the target event record to the terminal device, where the target event record is used to enable the terminal device to download an eUICC firmware version update package. The method further includes updating a firmware version of an eUICC of the terminal device based on the eUICC firmware version update package.

A vehicular software update apparatus is used to a vehicle to update software stored in an electronic control unit mounted on the vehicle. The vehicular software update apparatus includes a low power communication device configured to perform a wide area wireless communication with a low power consumption. The low power communication device is operated in an update confirmation state including a state where neither power generation in the vehicle nor power supplying to the vehicle is performed, and is caused to download software update information which is information necessary to update the software, when the software update information, is provided by the server.

Container image building using shared resources is disclosed. A first instruction file that contains a first plurality of instruction keywords is read. Based on the first plurality of instruction keywords, a first plurality of files from a shared location is copied to a first consolidated location. Based on the first plurality of instruction keywords, a first container command file that references at least some of the first plurality of files on the first consolidated location is generated, the first container command file including commands that comply with a container builder syntax.