In an electronic control unit, it is determine whether a data frame received from a different electronic control unit via a communication network is abnormal. A prediction data, which is predicted to be a normal data supposed to be included in the data frame determined to be abnormal, is generated by using a past data that is a data included in stored data frames, based on a stored prediction generation method. A prediction data frame including the prediction data is transmitted via the communication network.

A method for data exchange on a communication network, operating according to a protocol, and including a transmission bus, a first node and a second node. The first node carries out the steps of: constructing a first and a second data frame which transport first and second information data; calculating a first message authentication code as a function of the first and the second information data; constructing a third data frame which transports the first message authentication code; transmitting all of the data frames thus constructed. The second node carries out the steps of: receiving the first, the second and the third data frames; extracting the first and the second information data and the first message authentication code; calculating a second message authentication code as a function of the first and the second information data extracted; comparing the message authentication code extracted with the message authentication code calculated in order to verify the identity thereof.

Security system for protecting a vehicle electronic system by selectively intervening in the communications path in order to prevent the arrival of malicious messages at ECUs, in particular at the safety critical ECUs. The security system includes a filter which prevents illegal messages sent by any system or device communicating over a vehicle communications bus from reaching their destination. The filter may, at its discretion according to preconfigured rules, send messages as is, block messages, change the content of the messages, request authentication or limit the rate such messages can be delivered, by buffering the messages and sending them only in preconfigured intervals.

A wind turbine having a Controller Area Network communication system is provided. Electrical and/or electronic components of the wind turbine are coupled to CAN nodes. The communication system has a plurality of CAN nodes. At least one CAN distributor unit is coupled via a first communication segment to one of the plurality of CAN nodes and via a second communication segment to at least one further CAN distributing unit. The CAN distributor units are designed to carry out a data communication via the first communication segment on the basis of a first CAN protocol which represents a standard CAN protocol, and to carry out a data communication via a second communication segment on the basis of a second CAN protocol which is different from the standard CAN protocol.

Security system for protecting a vehicle electronic system by selectively intervening in the communications path in order to prevent the arrival of malicious messages at ECUs, in particular at the safety critical ECUs. The security system includes a filter which prevents illegal messages sent by any system or device communicating over a vehicle communications bus from reaching their destination. The filter may, at its discretion according to preconfigured rules, send messages as is, block messages, change the content of the messages, request authentication or limit the rate such messages can be delivered, by buffering the messages and sending them only in preconfigured intervals.

Security system for protecting a vehicle electronic system by selectively intervening in the communications path in order to prevent the arrival of malicious messages at ECUs, in particular at the safety critical ECUs. The security system includes a filter which prevents illegal messages sent by any system or device communicating over a vehicle communications bus from reaching their destination. The filter may, at its discretion according to preconfigured rules, send messages as is, block messages, change the content of the messages, request authentication or limit the rate such messages can be delivered, by buffering the messages and sending them only in preconfigured intervals.

Systems, apparatuses, and methods are described herein for a communication bus that virtualizes physiological data. Sensors and/or physiological data acquisition devices have different physical connectors which provide physiological data from a patient to a shared interface such as a display or patient monitor. A transfer interface within a mount can receive and interpret data streams associated with one or more physiological data acquisition devices. The transfer interface can prioritize the various data streams associated with the one or more physiological data acquisition devices and generate a single, combined data stream based on the assigned prioritization. The transfer interface can provide the combined data stream for transmission to a patient monitor via an interchangeable transport medium. Another transfer interface can process and/or virtualize the data streams from the physiological data acquisition devices.

An electric system for transmitting serial communication messages with different priorities over a communication link. The data to be transmitted is arranged in serial communication messages comprising a start of packet (SOP) symbol and data symbols. The ongoing transmission of a first message is interrupted if a SOP symbol of a second message is sent before the first message has been completed. Transmission of the first message is continued only after the second message has been sent.

An I/O server service interfaces with multiple containerized controller services each implementing the same control routine to control the same portion of the same plant. The I/O server service may provide the same controller inputs to each of the containerized controller services (e.g., representing measurements obtained by field devices and transmitted by the field devices to the I/O server service). Each containerized controller service executes the same control routine to generate a set of controller outputs. The I/O server service receives each set of controller outputs and forwards an “active” set to the appropriate field devices. The I/O server service may utilize a quality-of-service metric to determine which controller outputs and/or I/O channel is “active.” The I/O server service and other services, such as an orchestrator service, may continuously evaluate performance and resource utilization in the control system, and may dynamically activate and deactivate controller services as appropriate.

A communication system includes a central, zone ECUs capable of communicating with the central ECU via a communication bus, and zone ECUs capable of communicating with the central ECU via a communication bus. The central ECU periodically transmits, to the communication buses, a count signal including a count value counted up every time the count signal is transmitted, transmits a control signal including a start count value and control content to the communication buses, and sets a transmission priority of the count signal to be higher than a transmission priority of the control signal. The zone ECUs receive the count signal and the control signal, after the control signal is received, when the count value included in the received count signal becomes equal to the start count value included in the control signal, an operation corresponding to the control content included in the control signal is started.