Method for setting up a redundant communication connection, and failsafe control unit, wherein a transport and/or switching functional unit of a communication device utilizes at least one communication network address associated with a primary control device and/or a secondary control device to set up two communication connections to a failsafe control unit that includes the primary control device and the secondary control device, where data transmitted via a first communication connection are forwarded from the primary control device to the secondary control device via a first synchronization connection such that data transmitted via a second communication connection are forwarded from the secondary control device to the primary control device via a second synchronization connection.

A ringing suppression circuit is provided at one or more nodes each having a communication circuit executing communication with another node by transmitting a differential signal through a pair of communication lines connected to the nodes. The operation controller is configured to shift a mode of the suppressor to a normal-operation mode when the differential signal is transmitted through the pair of communication lines, and to shift the mode of the suppressor to a low-current operation mode when the differential signal is not transmitted through the pair of communication line. A current consumption of the suppressor is less in the low-current operation mode than the normal-operation mode. The suppressor and the operation controller are configured to receive permanent power from a DC power supply, and the communication circuit is configured to receive power from the DC power supply via a power supply switch.

A ringing suppression circuit is provided at one or more nodes each having a communication circuit executing communication with another node by transmitting a differential signal through a pair of communication lines connected to the nodes. The operation controller is configured to shift a mode of the suppressor to a normal-operation mode when the differential signal is transmitted through the pair of communication lines, and to shift the mode of the suppressor to a low-current operation mode when the differential signal is not transmitted through the pair of communication line. A current consumption of the suppressor is less in the low-current operation mode than the normal-operation mode. The suppressor and the operation controller are configured to receive permanent power from a DC power supply, and the communication circuit is configured to receive power from the DC power supply via a power supply switch.

An industrial controller that controls operation of an industrial system. The industrial controller comprises a processor and a memory storing instruction, wherein the instructions cause the processor to perform certain functions. In particular, the instructions cause the processor to communicate high speed data in a first industrial protocol between the industrial controller and a high speed device during a first frame section but not during a second frame section of a controller frame of the industrial controller and communicate linking device data in a second industrial protocol between the industrial controller and a linking device during the second frame section but not during the first frame section or during the third frame section of the controller frame.

A fail-safe system for a cluster application is disclosed. The system includes a first subsystem comprising a graphic processing unit (GPU) that executes a high-level operating system renders a first set of parameter data, and a second subsystem that executes a real-time operating system and renders a second set of parameter data. The system also includes a controller area network connected to a parameter data source input and to the first subsystem and the second subsystem. The system further includes a quality of service (QoS) switch executing a QoS monitor module that decides to display the first set of parameter data being rendered by the first subsystem or the second set of parameter data being rendered by the second subsystem depending on an availability and load of the first subsystem as determined by a lag and a stability threshold. The system further includes a display connected to the QoS switch.

A system for in-vehicle network intrusion detection includes: (i) an anomaly detection module configured to obtain one or more network messages from one or more communication buses of a vehicle describing one or more events associated with the vehicle and detect whether at least some of the one or more events constitute an anomaly based on predefined rules to provide detected anomaly event data; (ii) a resident log generation module configured to generate one or more resident incident logs based on the detected anomaly event data, wherein the one or more resident incident logs comprise metadata associated with one or more detected anomalous events; and (iii) a transmitted log generation module configured to generate one or more transmitted incident logs based on the one or more resident incident logs, wherein each of the one or more transmitted incident logs corresponds to a resident incident log.

A fail-safe system for a cluster application is disclosed. The system includes a first subsystem comprising a graphic processing unit (GPU) that executes a high-level operating system renders a first set of parameter data, and a second subsystem that executes a real-time operating system and renders a second set of parameter data. The system also includes a controller area network connected to a parameter data source input and to the first subsystem and the second subsystem. The system further includes a quality of service (QoS) switch executing a QoS monitor module that decides to display the first set of parameter data being rendered by the first subsystem or the second set of parameter data being rendered by the second subsystem depending on an availability and load of the first subsystem as determined by a lag and a stability threshold. The system further includes a display connected to the QoS switch.

A communication terminal device connected to a network and performing data communications between another communication terminal device through the network, includes a storage configured to store proper information used as a criterion for switching an operation mode between a master unit operation mode and a slave unit operation mode, and circuitry configured to switch the master unit operation mode of a self device to the slave unit operation mode based on the proper information, while the self device is operating by the master unit operation mode. The master unit operation mode is the operation mode of the communication terminal device operating as a master unit, and the slave unit operation mode is the operation mode of the communication terminal device operating as a slave unit.

The invention relates to a bus participant device (30) for receiving and transmitting data telegrams (18) via a serial data bus (12) according to a master/slave method, wherein the bus participant device (30) is configured to function, in a slave mode, as a slave (16) on the data bus (12) by means of a slave unit (36) that is part of the bus participant device (30), wherein the bus participant device (30) comprises a master unit (38) that can be activated. In particular, by means of the slave unit (36) and/or the master unit (38), a transmission of data telegrams (18) via the data bus (12) can be monitored for a malfunction of an active bus master (14). Preferably, subject to a result of the monitoring process, an activation of the master unit (38) by means of the slave unit (36) or the master unit (38) can be effected. The invention further relates to a method for operating a serial data bus (12), and to various safety-critical devices.

A communication apparatus that forms, in a train in which fixed formations are coupled, a backbone network relaying signals between branch networks formed in the fixed formations with another communication apparatus that is made redundant, includes: a VRRP functional unit that, when operating as a master, periodically transmits an alive monitoring frame to another communication apparatus operating as a backup via the branch network, and, when operating as a backup, receives an alive monitoring frame transmitted from another communication apparatus operating as a master via the branch network; a port-malfunction detection unit detecting malfunction of the port to which the branch network is connected; and an alive determination unit that, when operating as a backup, detects whether another communication apparatus operating as a master has malfunctioned based on an alive-monitoring-frame reception result from the VRRP functional unit and a malfunction detection result from the port-malfunction detection unit.