Monitoring a technical system having a plurality of subsystems

Abstract

The invention relates to a computer-implemented method and to a device for monitoring a technical system (6). The technical system (6) comprises a plurality of subsystems (5, 9, 11, 13, 15). The system (6) is designed to carry out a plurality of functions. In order to improve monitoring, each function is assigned (A) a subset (21) of subsystems (9, 11, 15) which are involved in carrying out the function. Each subsystem (5, 9, 11, 13, 15) is assigned (B) a group of instances (8, 10, 17, 19) which are responsible for a functional capability of the respective subsystem (5, 9, 11, 13, 15). During monitoring, the plurality of subsystems (5, 9, 11, 13, 15) are monitored (C). A result of the monitoring of the plurality of subsystems (5, 9, 11, 13, 15) of the technical system (6) is determined (D) and, on the basis of the assignments, it is determined which instance (8, 10, 17, 19) is assigned (E) to the result.

Description

[0001] 202406011

[0002] 1

[0003] Description

[0004] Monitoring of a technical system with multiple subsystems

[0005] Technical field

[0006] The invention relates to a computer-implemented method and a device for monitoring a technical system. The system comprises a plurality of subsystems and is configured to perform a plurality of functions. The invention further relates to a computer program and a delivery device for the computer program. The invention also relates to a track-bound vehicle and a system.

[0007] Technical background

[0008] Methods and devices for monitoring technical systems are generally known. With technical systems, it is desirable that they function flawlessly and without malfunctions (i.e., that they are fully functional). To maintain the proper functioning of a technical system and to detect any malfunctions, it is monitored.

[0009] Monitoring of the technical system is often based on diagnostic messages originating from the technical system or generated by a monitoring device. These diagnostic messages are frequently reported to a central diagnostic system (incoming fault) and reset when the system returns to normal (outgoing fault).

[0010] For example, German patent application DE 10 2022 206 644 A1 describes a computer-implemented diagnostic method for diagnosing a passenger transport vehicle. The method generates a diagnostic message representing a diagnosis of at least one component of the passenger transport vehicle. Diagnostic identification information, which uniquely identifies the diagnostic message, is added to it. 202406011

[0011] 2

[0012] Summary of the invention

[0013] Against this background, the object of the present invention is to improve the monitoring of the technical system.

[0014] This problem is solved according to the invention by a method of the type mentioned above. In this method, each function is assigned a subset of subsystems involved in the execution of the function. Each subsystem is assigned a group of instances responsible for the functionality of the respective subsystem. During monitoring, the majority of subsystems are monitored. A result of the monitoring of the majority of subsystems of the technical system is determined. Based on the assignments, it is determined which instance is assigned to the result.

[0015] The invention is based, on the one hand, on the understanding that functions of a technical system can be distributed across multiple subsystems. Furthermore, the invention recognizes that while the evaluation of a diagnostic message can be semi-automated in existing solutions, determining the origin of the malfunction that triggered the diagnostic message is typically performed by an expert from the vehicle manufacturer who evaluates the diagnostic message. This expert must possess, or have access to, detailed system and functional knowledge. With this approach, the verification of the cause is carried out manually. The solution according to the invention enables a report that can be generated automatically and clearly indicates which instance the result is attributable to.In other words, in the event of a malfunction, it is possible to automatically determine which instance can be held responsible for the malfunction.

[0016] An expert understands the term "function" to refer, for example, to a primary function of the technical system. In a rail vehicle, this primary function is, for instance, the propulsion system. Auxiliary functions of the technical system can also be included under the term "function." For example, the air conditioning system of a rail vehicle is an auxiliary function of this kind.

[0017] The formulation that each function is assigned a subset of subsystems includes subsets of size 1 (i.e., 1 = number of subsystems) or larger subsets. The technical system has multiple subsystems. For example, several subsystems are involved in the execution of a function. For instance, in communication 202406011

[0018] The following subsystems are involved in the communication between a door control system and a shore-based facility: the door control system, a vehicle communication network, a vehicle communication interface (e.g., a Mobile Communication Gateway (MCG)), a shore-based communication interface (e.g., a Ground Communication Gateway (GCG)), and the shore-based facility. These subsystems are therefore assigned to the function "Communication between the door control system and the shore-based facility" because they are involved in executing this function.

[0019] The term "instance" is preferably to be understood as including a party involved in the operation of the technical system and / or a trade as well as a technical facility contributed by the party for the operation.

[0020] Embodiments of the invention

[0021] According to a preferred embodiment of the computer-implemented method according to the invention, the technical system comprises a track-bound vehicle. According to an alternative preferred embodiment, the technical system is part of a track-bound vehicle.

[0022] The track-bound vehicle is preferably a rail vehicle, for example a multiple unit train.

[0023] The majority of functions performed by the technical system include, for example, propulsion of the rail-bound vehicle, air conditioning of the rail-bound vehicle, passenger information for passengers of the rail-bound vehicle, etc.

[0024] According to a further preferred embodiment of the computer-implemented method according to the invention, the instance comprises a technical facility of a manufacturer responsible for the manufacture of the technical system, a technical facility of a supplier who provides the manufacturer with at least one subsystem of the technical system, and / or a technical facility of an operator of the technical system. 202406011

[0025] 4

[0026] The manufacturer's technical facility is, for example, a test bench where the subsystem assigned to the instance is tested. The manufacturer is, for example, a vehicle manufacturer.

[0027] The supplier's technical facility is, for example, a production line for a subsystem that the supplier delivers to the vehicle manufacturer.

[0028] The operator's technical equipment is, for example, an operations control center from which the operation of the technical system is monitored / controlled. The operator is, for example, a vehicle operator, in particular a railway operator.

[0029] According to a preferred embodiment of the computer-implemented method according to the invention, monitoring of the technical system results in the detection of an impairment or failure of function. Based on the classifications, it is determined which instance is to be attributed to the detected impairment or failure.

[0030] Particularly in the event of a malfunction or failure of a function, it is desirable to automatically determine which instance is responsible. This embodiment of the method according to the invention is based on the understanding that the joint operation of a technical system by several instances is frequently managed through service-level agreements. These agreements often stipulate contractual penalties for the instance responsible for a malfunction or failure of a function achieved through the operation of the technical system.

[0031] According to a preferred embodiment of the computer-implemented method according to the invention, the result of the monitoring is determined by executing a monitoring computer program, which is at least partially installed and executed on a computing device of the technical system to be monitored.

[0032] Preferably, the monitoring computer program is executed on several computing units of the technical system to be monitored. Alternatively or additionally, parts of the monitoring computer program can be executed on one computing unit and other parts of the monitoring computer program on another computing unit of the technical system to be monitored. 202406011

[0033] 5

[0034] In a preferred training method, the monitoring computer program is distributed across multiple computing units of the technical system being monitored. Each computing unit is assigned at least one storage unit, which stores information acquired during monitoring. The information stored across these multiple storage units is then synchronized.

[0035] The skilled person preferably understands the term "distributed execution" to mean that parts of the monitoring computer program are executed on one computing device and other parts of the monitoring computer program are executed on another computing device of the technical system to be monitored.

[0036] In an alternative or additional training scenario, the monitoring computer program is executed redundantly on multiple computing units of the technical system being monitored. Therefore, at least parts of the monitoring computer program are executed in parallel on several computing units.

[0037] The aforementioned problem is further solved by a computer program. The computer program comprises instructions which, when executed by a computing device, cause the device to perform the method for monitoring the technical system of the type described above. The invention further relates to a computer program product comprising a computer program of this type. The computing device is preferably, at least in part, a computing device of the technical system to be monitored.

[0038] The aforementioned problem is further solved by a provisioning device for the computer program of the type described above, wherein the provisioning device stores and / or provides the computer program. The provisioning device is, for example, a storage unit that stores and / or provides the computer program. Alternatively and / or additionally, the provisioning device is, for example, a network service, a computer system, a server system, in particular a distributed, for example cloud-based, computer system and / or virtual computer system, which preferably stores and / or provides the computer program product in the form of a data stream.

[0039] The provision is in the form of a program data block as a file, in particular as a download file, or as a data stream, in particular as a download data stream, of 202406011

[0040] 6

[0041] Computer program. This provision can, for example, also take the form of a partial download consisting of several parts. Such a computer program is, for example, read into a system using the provisioning device, so that the method according to the invention is executed on a computer.

[0042] The aforementioned task is further solved by a device for monitoring a technical system. The technical system comprises a plurality of subsystems and is configured to perform a plurality of functions. Each function is assigned a subset of subsystems involved in its execution. Each subsystem is assigned a group of instances responsible for the functionality of the respective subsystem. The device is configured to monitor the plurality of subsystems, determine the result of the monitoring of the plurality of subsystems of the technical system, and, based on the assignments, determine which instance is assigned to the result.

[0043] The aforementioned problem is further solved by a track-bound vehicle which includes a device of the type described above. Preferably, the system to be monitored is part of the track-bound vehicle.

[0044] The aforementioned task is further solved by a system comprising a track-bound vehicle, a land-based facility, a communication link for communication between the track-bound vehicle and the land-based facility, and a device of the type described above. The system can also be referred to as the overall system, which includes the technical system of the type described above to be monitored.

[0045] The onshore facility includes, for example, a computer system belonging to a customer of the vehicle manufacturer, in particular an operator of the vehicle. Furthermore, and preferably, the onshore facility includes an operations control center.

[0046] The device is, for example, part of the track-bound vehicle or the land-based equipment. Alternatively, the device is, for example, distributed across the track-bound vehicle and the land-based equipment.

[0047] Regarding the advantages, embodiments and design details of the computer program according to the invention, the provisioning device according to the invention, the 202406011

[0048] 7. Regarding the device according to the invention, the track-bound vehicle according to the invention and the system according to the invention, reference can be made to the preceding description of the corresponding method features of the computer-implemented method according to the invention for monitoring a technical system.

[0049] Regardless of the grammatical gender of a particular term, persons with male, female or other gender identities are included.

[0050] Exemplary embodiments of the drawing

[0051] Figure 1 schematically shows the process of the computer-implemented method according to the invention,

[0052] Figure 2 schematically shows the structure of a system according to the invention with a land-based facility and a track-bound vehicle,

[0053] Figure 3 shows a topology of an embodiment of a system according to the invention and

[0054] Figure 4 shows a so-called system-building block for a surveillance computer program.

[0055] Detailed description of the exemplary implementations

[0056] Figure 1 shows a schematic flowchart representing the process of the exemplary embodiment of the computer-implemented method according to the invention.

[0057] Figure 2 shows a track-bound vehicle 1. The track-bound vehicle 1 is a rail vehicle 2. The track-bound vehicle 1 is connected to a land-based facility 5 via a communication link 3. The track-bound vehicle 1 and the land-based facility 5 together form a technical system 6, which is monitored according to the method according to the invention.

[0058] The track-bound vehicle 1 has an information technology system 7. This information technology system 7 includes an Ethernet network 9, a server 11, and at least one terminal device 13. The server 11 and the terminal device 13 are connected to the Ethernet network 9. 202406011

[0059] 8

[0060] The information technology system 7 is provided by instance 8. In the illustrated embodiment, this instance 8 is the vehicle manufacturer of the track-bound vehicle 1, who provides the information technology system 7 as part of the vehicle 1 manufacturing process and installs or integrates it into the track-bound vehicle 1 during manufacturing and prepares it for commissioning. Another instance 10 is a supplier who manufactures subsystems and delivers them to the vehicle manufacturer. In the illustrated embodiment, the supplier has provided the terminal device 13.

[0061] The Ethernet network 9 functions as an operator network, which is technically separated from a (not shown) control network of the track-bound vehicle 1.

[0062] An operator device 15 is connected to the Ethernet network 9 and forms a hardware component 16, which is provided and operated by an instance 17. In the illustrated embodiment, the instance 17 is the operator of the track-bound vehicle 1. The operator is also responsible for providing and operating the on-site facility 5.

[0063] The communication link 3 includes, for example, a mobile communications infrastructure 18, which is provided and operated by a mobile communications provider as a further instance 19.

[0064] The track-bound vehicle 1 is, for example, capable of performing various functions. In one of these functions, information from the server 11 is provided to the operator device 15, with the information being transmitted to the operator device 15 via the Ethernet network 9. The operator device 15 has, for example, a display that shows the transmitted information.

[0065] The server facility 11, the Ethernet network 9, and the operator device 15 are each subsystems of system 6. They form a subset 21 of subsystems of system 6. This is because system 6 contains further subsystems, such as the land-based facility 5.

[0066] According to the inventive method, in a process step A, the server equipment 11, the Ethernet network 9, and the operator device 15 are assigned to this function as a subset 21 of subsystems. 202406011

[0067] 9

[0068] In a further process step B, these subsystems are assigned to a group of instances. The group can have a size of 1 (i.e., consist of a single group member) or comprise a larger number (>1) of group members. Thus, in the illustrated embodiment, the vehicle manufacturer is assigned instance 8 to the server facility 11 and the Ethernet network 9. The operator is assigned instance 17 to the operator device 15.

[0069] The technical system is now monitored in process step C. In particular, the subsystems of the technical system are monitored. During the monitoring of technical system 6, a result of the monitoring of the technical system is determined according to process step D. For example, it is detected that the function described above is impaired or has failed. For this purpose, measured actual values ​​of the subsystems are compared with target values.

[0070] Based on the assignment according to process step A and the assignment according to process step B, process step E determines which instance is to be assigned to the result. For example, process step E1 uses the assignments to determine which instance is to be assigned to the detected impairment or failure.

[0071] The schematic representation shown in Figure 3 depicts a topology of the system according to the invention. In the embodiment shown in Figure 3, the topology is that of a system within a vehicle. The system comprises several nodes 101 (represented as circles in Figure 3), which can be configured as network switches or network routers. Furthermore, the system comprises several computing units 103 (represented as squares in Figure 3). A monitoring computer program (represented as triangles in Figure 3) is installed on several of the computing units 103. The monitoring computer programs 105 and 107 shown in Figure 3 can be mutually synchronized so that relevant data sets are unambiguously maintained.

[0072] For example, the monitoring computer program 105 is executed redundantly to the monitoring computer program 107.

[0073] Alternatively or additionally, the monitoring programs 105 and 107 can be parts of a distributed monitoring computer program. In this case, part of the monitoring computer program 105 is executed on one computer and another part of the 202406011

[0074] 10

[0075] The monitoring computer program 107 is executed on another computing device 103. This allows for load balancing during monitoring. This load balancing can be configured manually or automated according to a distribution algorithm.

[0076] Figure 4 shows a so-called system-building block of an exemplary implementation of a monitoring computer program.

[0077] The technical system 202 to be monitored comprises all monitored subsystems and system measurement points in the track-bound vehicle 1. The subsystems include, for example, network components such as network switches, network routers, and Wi-Fi access points. Furthermore, the subsystems include computing equipment and the services running on it, such as web servers, application servers, etc.

[0078] The monitoring computer program 204, which can also be technically referred to as a train monitoring instance, is formed by the building blocks. Each track-bound vehicle has at least one train monitoring instance. If a track-bound vehicle has multiple train monitoring instances, the database contents are synchronized between the instances.

[0079] Information about the technical system is received by a monitoring execution layer 206. Defined checks are performed on this monitoring execution layer 206. The modules (plugins) required for the check are called (e.g., ping, SNMP get, HTTP get) and the result is received. The received return value is then passed on to a system monitoring layer 208.

[0080] In system monitoring layer 208, a system object is created for each system measurement point to be monitored. This system object represents the measurement point and contains all attributes relevant for monitoring. The state of the system objects is provided to the higher-level functional monitoring layer 210. The state is maintained in a status model, with changes being logged in a history log.

[0081] In the functional monitoring layer 210, a function object is created for each functional measurement point to be tested. This function object represents the measurement point and contains 202406011.

[0082] 11. All attributes relevant for monitoring. At least one system object is assigned to a function object. If several system objects are assigned to a function object, the system objects are logically related to each other. The state of the function object is provided to the higher-level reporting layer 212.

[0083] In reporting layer 212, a report is generated based on historical data (availability, faults, performance values) and their defined target values ​​and groups. This report shows the achieved values ​​and deviations from the defined target values. Deviations are identified, and the affected function and subsystems are assigned to a group. Failures can therefore be suspended (or disregarded) from a specific group if the cause belongs to a different group. The report also includes detailed information (such as arrival / departure time, position, device name, installation location, vehicle number, car designation, etc.).

[0084] Database 214 contains various settings and values. These include defined parameters consisting of system measurement points (e.g., checking a response from a web server), function measurement points (e.g., linking 1 to n system measurement points), topology information about the systems in the train (e.g., description of the connections between the systems), reporting groups (assignment of parameters to groups), and information about other monitoring computer programs (e.g., hostname or IP address).

[0085] The current monitoring status of the monitoring computer program 204, as well as historical data, are stored in memory as history information 216. Based on deviations of actual values ​​from predefined target values, an alarm 218 and a log 220 are triggered. In alarm 218, an alarm message is generated and sent to the higher-level vehicle diagnostic system. For example, incoming messages are generated when a fault occurs (when monitored values ​​deviate from target values). Furthermore, outgoing messages are generated when the fault is resolved (when the monitored values ​​are back within the target range). In log 220, changes in the state of the monitored system are recorded. A defined subset of the log is transmitted as a log message to the higher-level vehicle diagnostic system.

[0086] Although the invention has been illustrated and described in detail by the preferred embodiment, the invention is not limited by the disclosed examples and 202406011

[0087] 12 other variations can be derived by a person skilled in the art without leaving the scope of protection of the invention.

Claims

202406011 13 Patent claims 1. Computer-implemented method for monitoring a technical system (6), which • comprises a plurality of subsystems (5, 9, 11, 13, 15) and • is set up to execute a plurality of functions, characterized in that • each function is assigned a subset (21) of subsystems (9, 11, 15) that are involved in the execution of the function (A), • each subsystem (5, 9, 11, 13, 15) is assigned a group of instances (8, 10, 17, 19) that are responsible for the functionality of the respective subsystem (5, 9, 11, 13, 15) (B), • when monitoring the majority of subsystems (5, 9, 11, 13, 15) (C), • a result of monitoring the majority of subsystems (5, 9, 11, 13, 15) of the technical system (6) is determined (D) and • based on the assignments, it is determined which instance (8, 10, 17, 19) is assigned to the result (E).

2. Computer-implemented method according to claim 1, characterized in that the technical system (6) comprises a track-bound vehicle (1) or the technical system (7) is part of a track-bound vehicle (1).

3. Computer-implemented method according to claim 1 or 2, characterized in that the instance (8, 10, 17, 19) is a technical device • a manufacturer (8) who is responsible for the manufacture of the technical system (6), • a supplier (10) who supplies the manufacturer with at least one subsystem of the technical system (6), and / or • of an operator (17) of the technical system (6, 7). 202406011 14 4. Computer-implemented method according to at least one of the preceding claims, characterized in that • during monitoring of the technical system, an impairment or failure of function is detected as a result and • Based on the assignments, it is determined (E1) which instance (8, 10, 17, 19) is to be assigned to the detected impairment or failure.

5. Computer-implemented method according to at least one of the preceding claims, characterized in that the determination of the result of the monitoring is carried out by executing a monitoring computer program (105, 107) which is executed at least partially on a computing device (103) of the technical system to be monitored.

6. Computer-implemented method according to claim 5, characterized in that the monitoring computer program (105, 107) is executed distributed across several computing devices (103) of the technical system to be monitored, - each computing unit (103) is assigned at least one storage unit by means of which information acquired during monitoring is stored and the information stored by means of the multiple storage units is synchronized. 202406011 15 7. Computer-implemented method according to claim 5, characterized in that the monitoring computer program (105, 107) is executed redundantly on several computing devices (103) of the technical system to be monitored.

8. Computer program comprising instructions which, when executed by a computing device, cause it to execute the method according to at least one of claims 1 to 7.

9. Provisioning device for the computer program according to claim 7, wherein the provisioning device stores and / or provides the computer program.

10. Device for monitoring a technical system, wherein the technical system • comprises a plurality of subsystems and • is set up to execute a plurality of functions, characterized in that • Each function is assigned a subset of subsystems involved in the execution of the function, • Each subsystem is assigned a group of instances responsible for the functionality of the respective subsystem, with the device being set up, • to monitor the majority of subsystems during monitoring, • to determine a result of monitoring the majority of subsystems of the technical system and • to determine, based on the assignments, which instance is assigned to the result.

11. Track-bound vehicle (1) comprising a device according to claim 10. 202406011 16 12. System (6) comprising a track-bound vehicle (1), a land-based facility (5), a communication link (3) for communication between the track-bound vehicle (1) and the land-based facility (5) and a device according to claim 10.

Images