Military vessel with sensors

Abstract

MILITARY VESSEL WITH SENSORS. This refers to a military vessel (100) comprising - several vessel components (104-110) which respectively contain one or more sensors (112-120), wherein at least some vessel components (104-110) belong to a weapon system (102) of a drive unit (104) and to a navigation system (106), wherein the sensors are configured to detect measurement values, wherein the measurement values ​​indicate operating states of the vessel components containing the sensor that detects the measurement values, and / or states of the vessel or its environment; - a database (122), wherein a history of sensor measurement values ​​is stored in the database in a persistent and protected manner in connection with a date stamp;and - an electronic automation system (124), wherein the automation system is configured for the automatic and / or semi-automatic control of at least one of the vessel's components in real time, based on measurement values ​​and / or based on user input from a user, which occurs in response to an output of measurement values ​​via a user interface.;

Description

1 / 64 “MILITARY VESSEL WITH SENSORS” Area

[0001] The invention relates to a military vessel, in particular, to a military vessel with sensors for detecting measurement values. Background

[0002] Military vessels are often highly complex systems, developed for specific applications, and featuring a multitude of components from different manufacturers. Compared to civilian vessels, military vessels are frequently characterized by a relatively small number of units, high complexity, a large number of vessel components used, and the need for protection of vessel-related data. The composition of vessel components is therefore often very heterogeneous, and given the infinite density of component integration and manufacturers, it is not always possible to fully understand the interaction of individual components for every conceivable application scenario.Add to this the tendency of manufacturers of vessel components to keep measurement values, detected by internal component sensors, secret in order to prevent third parties from using this knowledge to imitate or hack the vessel's components.

[0003] These circumstances therefore represent considerable inhibitions to the integration of the vessel's components into military vessels.

[0004] German patent document DE 102008025803 A1 describes a ship's internal combustion engine with a control device for controlling and / or regulating the operation of the ship's internal combustion engine. The control device determines, based on the ship's position, theoretical operating parameters for the ship's internal combustion engine.

[0005] German patent document DE 102011 086355 A1 describes a weapon system for the defense of objects, in particular, for use on ships. Petition 870260066452, dated 06 / 07 / 2026, page 32 / 170 2 / 64 commercial, comprising at least one tubular weapon, a firing device, a sensor system for detecting data, in particular, environmental data and / or target data, and an authorization system. In this case, the authorization system is equipped to release or block the firing device, depending on the receipt of a release signal.

[0006] German patent document DE 31 50 895 A1 describes a combat ship with systems linked through electronic control devices. In the case of the combat ship with systems that control and are controlled, electronic control devices are provided that, based on raw information arriving from the coordinated control system, generate control signals for the coordinated controlled systems. For each coordinated controlled system, the electronic control devices have a correction stage for modifying the control signals generated as a function of a safety fault in the controlled system and / or the controlling system admitting the control device. In addition, storage is provided for safety fault values ​​as a function of the horizontal angular position of the controlled system and / or the controlling system.

[0007] US patent document 2008 / 0120620A1 describes the use of an “open software architecture” for a fleet of ships.

[0008] U.S. Patent Document US2018 / 0304969 A1 describes a ship with a propeller mounted on a rotating shaft and a method for transforming the power of a rotating shaft into thrust in order to propel the ship in the water. The method comprises providing measurement values ​​that are descriptive for shaft power, an estimate of two excessive shaft powers caused by propeller fouling and hull fouling, and issuing an indication for propeller cleaning and / or hull cleaning based on the estimated excessive shaft powers.

[0009] US patent document US2019 / 0176945 A1 describes a ship motion control system that optimally compensates for power and noise emission.

[0010] US patent document 2006 / 0058929A1 describes a method for verifying a ship's control system, in which the system Petition 870260066452, dated 06 / 07 / 2026, page 33 / 170 3 / 64 of the control system, in its operating state, receives sensor signals and, in response, sends control signals to actuators in order to maintain a desired position, speed, stroke, or other parameters.

[0011] US patent document 2018 / 0356826A1 describes a system and a method for facilitating decisions on a vessel. The method comprises: detecting environmental data, the environment in which the vessel is located, producing a multitude of digital models that respectively model an environmental effect on a corresponding vessel capability; using the environmental data and the digital models, modeling an environmental effect on the vessel capabilities and creating a risk assessment for a selected action.

[0012] Patent document KR20070040188A describes a system and method for the remote control of an unmanned patrol vessel, enabling the performance of desired patrols through remote or automatic control of the vessel, which automatically executes sequential missions such as automatic discrimination, remote alerting, lock-on operation, and attack operation. The unmanned patrol vessel includes a control computer that operates the patrol tasks, a multi-communication module that transmits and receives information, an integrated navigation module that tracks / navigates to a target location, a control module that controls a water jet propulsion device, patrol equipment, and video transmission equipment.A remote control room remotely monitors and controls patrol operations in real time using navigation information, numerical values, and video received from the unmanned patrol vessel, utilizing a monitoring console. The unmanned patrol vessel is recovered from a communication or control-inability state in case of emergency by installing a dedicated transceiver between the multi-communication module and the remote control room.

[0013] US patent document US2009271054A1 describes an integrated vehicle information system, for example, a maritime vessel, wherein the system has two subsystems that obtain information about submerged objects in Petition 870260066452, dated 06 / 07 / 2026, page 34 / 170 4 / 64 two regions around the vehicle. A third subsystem obtains information and includes a receiving unit to receive information from an information source, for example, a control center, external to the vehicle. A combination unit combines and processes the information received from the three subsystems. A presentation unit presents the combined and processed information to the vehicle user. A transmission unit transmits the information from the subsystems to the source. Also included are: a data processing apparatus comprising a processing unit; a method for receiving information; a computer program product comprising instructions for executing a method for receiving information; a device for receiving information; a computer program comprising instructions for displaying information; a computer program for a data processing device.

[0014] German patent document DE102008025803A1 describes an internal combustion engine (ICE) for a marine vehicle, which has a controller that determines the drive adjustment parameters by consulting a database based on the vessel's determined position. The controller allows open-loop and closed-loop drive control of the marine vehicle's engine, for example, a ship. A determination unit connected to the controller determines the vessel's current position. The controller determines the drive adjustment parameters, for example, the permitted sulfur content, by consulting a database based on each vessel's determined position.

[0015] The publication ANDO, Hideyuki Smart Ship Application Platform Project (SAP Project). In: Sea Japan 2014, Environmental Technology Seminar, April 11, 2014, 11 p. URL: https: / / www.mlit.go.jp / common / 001039009.pdf [accessed 20-07-2020] describes application services in the context of a “Smart Ship” in order to achieve optimal ship operation with regard to safety and energy efficiency. Abstract

[0016] The invention is based on the objective of making available a vessel Petition 870260066452, dated 06 / 07 / 2026, p. 35 / 170 5 / 64 military upgrade.

[0017] The objectives of the invention are respectively addressed by the features of the independent patent claims. Embodiments of the invention are indicated in the dependent claims. The embodiments presented below may be freely combined with each other, as they are not mutually exclusive.

[0018] In one aspect the invention relates to a military vessel.

[0019] The military vessel contains several vessel components that respectively contain one or more sensors. At least some of the vessel components belong to a weapon system, a drive unit, and a navigation system. The sensors are configured to detect measurement values, wherein the measurement values ​​contain operating states of the vessel component containing the sensor that detects the measurement values, and / or indicate states of the vessel or its environment.

[0020] The military vessel also contains a database. The database persistently and securely stores a history of sensor measurement values ​​linked to a timestamp.

[0021] The military vessel contains an electronic automation system. The automation system is implemented for the automatic and / or semi-automatic control of at least one of the vessel's components in real time, based on measurement values ​​and / or user input, which occurs in response to the transmission of measurement values ​​through a user interface.

[0022] This can be advantageous, since a vessel configured in this way uses the measurement data detected by the measuring sensors in a dual manner: on the one hand, the measurement data is used directly or indirectly to influence the automation system and thus its control through individual vessel components. For example, the measurement values ​​detected directly are transmitted as input to the automation system. Additionally or alternatively, the measurement values, or at least some of these values, can be indicated to a user, so that this user can make decisions based on them. Petition 870260066452, dated 06 / 07 / 2026, page 36 / 170 6 / 64 measurement values, as the automation system needs to be operated. A primary use of the currently valid measurement data therefore consists of influencing the control of the vessel's components in real time. On the other hand, the measurement data is additionally stored in a database. This occurs in such a way that the time course of the production of the measurement data (the history of measurement values) can be retrieved from the database, for example, with the aid of a date stamp (preferably UTC or location-independent and unambiguous), which indicates the instant of detection of a measurement value.Because measurement data is persistently stored in a database, it allows for the automatic creation, over time, of a database through which complex dependencies and interactions of various vessel components or their states (engine temperature, turbine speed, rudder vibration), taking into account environmental parameters (temperature, air humidity, pressure, depth, geographical position), can be applied to experiments. For example, the database content can be used as a training dataset to train a machine learning algorithm based on this data. The result, therefore, can reveal hidden, non-evident, or indirectly recognizable technical contexts and interactions, and this, in principle, can be done individually for each vessel, which is especially relevant in the military field with small numbers of units and many special productions.

[0023] Measurement values ​​are stored securely in the database, meaning that these values ​​are protected against access by unauthorized persons through technical security measures, for example, by means of encryption or preventing anonymous access by means of an access rights agreement.

[0024] Therefore, it is possible, in principle, to digitally detect all the measurement values ​​that accumulate on a vessel, which may come from various components of the vessel and from various manufacturers, and use them both for real-time vessel control and for subsequent analysis of a history of the digital measurement values ​​detected by the sensors (as well as if they are available). Petition 870260066452, dated 06 / 07 / 2026, page 37 / 170 7 / 64 or not in the automation) of a vessel. Vessel operators, therefore, have the possibility, based on the history stored in the database and optionally using their own analysis tools, to obtain valuable knowledge about an individual vessel, even if the data from a complex, heterogeneous environment comes from vessel components and sensors from various manufacturers. Once the measurement values ​​from various sensors of various vessel components have been stored in a single database, they are accessible to a wide variety of multivariate analyses, as they are used, for example, in the context of big data. The timestamp, which can be configured, for example, as a UTC timestamp, allows the various measurement values ​​to be unambiguously related to each other, and optionally also to the instants at which control commands were sent to vessel components or sub-components.

[0025] Embodiments of the invention therefore enable a unified use and analysis of all digital data that arise / are detected, which in the case of increasingly complex platforms, installations and systems on board a military vessel can arise and be detected, thus enabling frictionless integration, installation, commissioning and long-term operation of the vessel and its components.

[0026] Embodiments of the invention may be helpful, in particular, in military areas, since the detailed knowledge of users of individual vessel components is often limited or cannot be reliably consulted in military cargo situations. Vessels and components are becoming increasingly complex and the number of crew members smaller (even to zero crew members, which corresponds to fully autonomous vessel control). Sensor detection and data storage in a database can compensate for these disadvantages.

[0027] According to embodiments of the invention, the vessel comprises several (at least two) computers networked together to form a computer cluster, which work together in a network as Petition 870260066452, dated 06 / 07 / 2026, page 38 / 170 8 / 64 hosts, such that at least one instance of the database is prepared. It is also possible that some or all of the database data is stored redundantly on the various computer systems, for example, because multiple instances of the database, including some or all of the database data, are generated on the various computers.

[0028] According to embodiments, the vessel comprises container management software, which is configured for the automated preparation, scaling, and management of multiple containers (“orchestration”) of at least one container on at least one computer, in such a way that this at least one computer serves as a host system for the at least one container, wherein the at least one container isolates the programs that operate within that container from programs that operate outside that container. Preferably, the container management software orchestrates multiple containers for one or more computers.

[0029] According to embodiments of the invention, the vessel comprises several computers networked together to form a computer cluster and container management software. The container management software is configured for the automated preparation, scaling, and management (“orchestration”) of several (at least two) containers on the various computers, in such a way that the computers serve respectively as host systems for one or more containers, wherein the containers (from the same host computer system as well as different host computer systems) are isolated from each other.

[0030] This can be advantageous, since integrating multiple computers into a computer cluster and using container management software to orchestrate multiple containers hosted on the computers can result in high-performance system and database preparation and / or preparation of individual analysis modules, and in this case, it is also very fail-safe. For example, containers can be orchestrated in such a way that they prepare the database or parts of the database multiple times and / or a Petition 870260066452, dated 06 / 07 / 2026, p. 39 / 170 9 / 64 or multiple analysis modules, such that parallel access to identical copies of the data is possible. Regarding the database, the speed of read and write access increases for the measurement values ​​stored in the database, and it increases fail-safe. Regarding the analysis modules prepared according to some form of redundant implementation, this similarly increases the availability (possibly parallel implementation of the same type of analysis) and fail-safe of the corresponding analysis modules. In the context of a military vessel, both are of high importance, as a failure of the database and / or software programs instantiated in the containers can lead to critical data loss, data consistency issues, or the failure of forecasting and warning functions based on currently stored or previously stored measurement data.Furthermore, the use of containers and container management software for container orchestration enables simple system scaling, for example, if over time a significantly larger amount of (measurement) data needs to be stored and / or analyzed, and / or the number of software programs that must be instantiated in the computer cluster increases over time.

[0031] The use of containers for the preparation and isolation of software applications ensures the separation and management of resources used on a computer. The use of containers makes it possible to instantiate an application on various computers and environments (for example, various computers in a computer cluster, but also on computers of different types such as development, QA, production). In addition, updates are simplified.

[0032] According to embodiments, each container has restricted access, such that it can only access a specific range of storage assigned to it in main memory, as well as native applications (e.g., native databases).

[0033] According to some embodiments, only the analysis modules are hosted within containers, while the database as a database Petition 870260066452, dated 06 / 07 / 2026, page 40 / 170 10 / 64 native data is operated on another computer. Corresponding embodiments of the invention may have the advantage that access to the data stored in the database can be facilitated by the analysis modules instantiated in the containers.

[0034] According to other embodiments, at least some of the containers are configured in such a way that a virtual network link exists between some of the containers, such that analysis modules instantiated in one container can access the contents of one of the databases, which is instantiated within a container networked with the container itself. Corresponding embodiments may have the advantage that, for example, through container management software, a user can determine with great accuracy and fine granularity which analysis modules within which container can access the contents of other containers. For example, it is possible that a first container contains a first database with the measurement values ​​of sensors S1, S12, and S37, and a second container contains a second database with the measurement values ​​of sensors S17 and S35.Sensors S1, S12, and S37 come from manufacturer H1 sensors, while the measurement values ​​for sensors S17 and S35, conversely, come from manufacturer H2. It is now possible to configure the computer network or containers such that the analysis software A1 from manufacturer H1 runs in a third container, which can selectively access the first database in that container, but cannot access the data from the sensors of manufacturer H2 in the second container. Similarly, the configuration can include the analysis software A2 from manufacturer H2 running in a fourth container, which can selectively access the second database in that container, but cannot access the data from the sensors of manufacturer H1 in the first container.

[0035] In the case of computers according to embodiments, it may be a matter of servers, therefore computers, that prepare one or more programs or functions (e.g., analysis modules, databases, etc.) in external entities (e.g., other servers, analysis modules that are instantiated) Petition 870260066452, dated 06 / 07 / 2026, page 41 / 170 11 / 64 on other servers, users, etc.). Server computers are often characterized by above-average high computing capabilities and / or above-average amounts of available working memory.

[0036] According to embodiments of the invention, the military vessel further comprises one or more analysis modules, which are configured respectively to perform an analysis of at least a portion of the measurement values ​​stored in the database.

[0037] According to embodiments, the automation system, on the one hand, and one or more analysis modules, on the other hand, are operationally decoupled. In addition or alternatively, one or more analysis modules are configured to perform their respective analysis function without using an internet connection. According to embodiments, both the automation system and one or more analysis modules are configured to perform their respective control or analysis function without using an internet connection.

[0038] For example, the analysis modules are configured to analyze the history of measurement values ​​stored in the database, and based on the analysis calculate predictions regarding the current and / or future state of the vessel or its components, and / or an appropriate action from a technical or tactical point of view. Depending on the implementation method, handling recommendations are preferably calculated first, which are then converted manually, semi-automatically, or fully automatically.

[0039] Preferably, at least some of the analysis modules are configured to evaluate the measurement values ​​of two or more sensors, from two or more different components of the vessel and, in addition, optionally one or more environmental parameters (air pressure, water temperature, depth, geographical position of the vessel, ambient water current intensity, etc.). This has the advantage that the interactions that exist between the vessel components and / or environmental parameters can also be detected by retrospective analysis of the history of these measurement parameters, and can be used to Petition 870260066452, dated 06 / 07 / 2026, page 42 / 170 12 / 64 a forecast of future actions and states.

[0040] Performing the control and / or analysis function without using an internet connection can be advantageous, since an internet connection at sea is often not reliably available, and even when it is available in the military area, in some cases and for some systems it is turned off in order to increase system security and reduce the probability of detection.

[0041] The analysis is performed on the database data, and the analysis modules are operationally separated from the automation system. This means that the automation system is not affected by the analysis modules through operations for reading and processing measurement data. This is advantageous since the automation system is a real-time system, which, due to the operational separation, is protected against the fact that the reaction speed and / or responsiveness of the automation system is affected by the performance of the analysis modules. In the military context, it is of great importance that the automation system can react immediately and in real time to current conditions, for example, in order to automatically introduce the correct steps in battle situations in order to turn, brake, accelerate and / or convert defensive or aggressive measures.

[0042] According to embodiments of the invention, operational decoupling is achieved, on the one hand, through a form of asynchronous work, and on the other hand through one or more analysis modules.

[0043] For example, operational decoupling may involve the automation system and analysis modules being programmed in such a way that they can work independently of each other, therefore at no point does the automation system need data and / or wait for data that the analysis module prepares.

[0044] Alternatively, operational decoupling can be achieved through asynchronous register or read access to the database, on the one hand, via the automation system or via an operational service connected to the automation system, and on the other hand, via one or more analysis modules. For example, operational decoupling may involve that Petition 870260066452, dated 06 / 07 / 2026, p. 43 / 170 13 / 64 The automation system directly receives current measurement data from the sensors through a first communication channel, without the measurement data being recorded in the database before or during the data transmission through the first channel. This means that the automation system receives the current measurement data directly from the sensors, and immediately after its detection by the respective sensors, thus without the delay that could arise due to recording measurement data in a data memory. Asynchronously, the measurement data is recorded in the database in order to continue recording the history of the measurement parameters. The data channel through which this recording process can occur can also be designated as a second communication channel and, for example, be configured as an infinity of database connections, which are executed by the sensors with respect to the database.The use of the first communication channel and one or more secondary communication channels means that, if narrow points or delays occur during the recording of measurement data in the database, this does not lead to a delay in the transmission of measurement data to the automation system, since the transmission of measurement data to the automation system and the storage of measurement data in the database are temporally and operationally decoupled. In another embodiment, the vessel contains a service through which the automation system reads data from the database and / or records data generated by the automation system in the database. In this case, access to reading and / or recording of this service is operationally decoupled from access to reading / recording through the analysis modules.

[0045] Alternatively, operational decoupling can be achieved by instantiating the automation system on one hand, and one or more analysis modules on the other hand, on different computers. For example, asynchronous operation can be achieved by hosting the automation system on one or more computers first, and the database and analysis modules on one or more computers second. In Petition 870260066452, dated 06 / 07 / 2026, page 44 / 170 14 / 64 Alternatively, it is also possible that the automation system, on the one hand, and the database and analysis modules, on the other hand, are allocated different CPUs and / or working memory resources of a distributed computer network, in such a way that the automation system does not compete with the analysis modules for resources.

[0046] All these measures can be advantageous, since they ensure that the automation system or the real-time capability of the automation system is not affected by the storage and analysis of historical measurement data.

[0047] According to embodiments of the invention, the vessel comprises several analysis modules, which are housed in several different containers and thus isolated from each other.

[0048] This can be advantageous, as it improves fail-safe, controllability, and the performance of the analysis methods executed by the analysis modules. For example, there are powerful programs for managing containers across multiple computers that allow, through redundant generation, multiple instances of an analysis module within several different containers, so that certain analyses can be executed in parallel on different partial datasets of the database data, and thus in a particularly fast way.Furthermore, generating multiple instances of the same analysis module ensures that, even in the event of a computer failure or inaccessibility, the group of computers can immediately switch to another existing instance of the same analysis module running on a different computer, and / or that this other instance can be generated in a new container on the other computer in a short time. Additionally, it is possible to quickly and flexibly increase or decrease the number and distribution of instances generated by one or more analysis modules, depending on the specific situation.

[0049] For example, in a critical and secondary security military operation, if an analysis module, which with the aid of the distance traveled predicts the next maintenance date according to the routine for the vessel, has to Petition 870260066452, dated 06 / 07 / 2026, page 45 / 170 15 / 64 availability of sufficient CPU and working memory capacity for its work, or whether this module is primarily instantiated. But, for example, in the case of a critical reversing maneuver, it may be of high importance that another analysis module, which with the aid of various measurement values ​​relating to the material and current in the rudder, turbine and other components of the vessel, can correctly calculate whether the material load limits have been exceeded, or whether the stability of the ship has been compromised, if all the necessary CPUs and memory resources were available to perform its calculations correctly and quickly.

[0050] According to embodiments of the invention, each container is configured with at most one instance of at most one of the analysis modules.

[0051] This can be advantageous, since it ensures that each instance of an analysis module is configured in its own container. This enables extremely fine-grained orchestration of the analysis modules at the individual instance level, with the help of the container management program.

[0052] The condition that, thanks to their implementation in separate containers, the individual analysis modules are operationally isolated from each other, in the context of a military vessel, is particularly advantageous: for example, the analysis modules may come from various manufacturers of vessel components. Thus, for example, a first analysis module may be prepared by the manufacturer of a turbine, and be configured to analyze the measurement values ​​relating to the number of rotations, temperature and vibration behavior of a turbine from the same manufacturer with sensors for the number of rotations, temperature and vibration state of the turbine. The analysis can serve several purposes: for example, to determine if critical system states have been reached, which invalidate the manufacturer's warranty and / or necessitate an inspection or reconditioning of the turbine.However, the analysis can also serve to examine how individual measurement values ​​depend on each other, so if the turbine, for example, shows different vibration patterns within different ranges of rotational speeds. A second analysis module can be prepared, for example. Petition 870260066452, dated 06 / 07 / 2026, page 46 / 170 16 / 64 For example, by the manufacturer of an engine, and be configured to analyze measurement values ​​relating to the current engine temperature, the current engine power consumption, or other measurement values ​​relating to the engine. The analysis, likewise, can serve various purposes such as, for example, ascertaining whether a critical engine state has been reached or exceeded, which could lead to the invalidation of the manufacturer's warranty and / or necessitate an inspection or reconditioning of the engine. The analysis can also serve to examine how individual measurement values ​​depend on each other, therefore whether the engine, for example, shows different vibration patterns within different temperature ranges and / or power curves.Both the turbine manufacturer and the engine manufacturer, as well as the vessel operator, benefit from the fact that the analysis modules of the various manufacturers are separate from each other. This eliminates the possibility that third-party software programs, intentionally or unintentionally, might interact with a particular analysis module and cause a malfunction or lead to defective function execution. In the military field, it is crucial to constantly consider that supposedly reliable software may actually contain malicious software designed to impair the operation of vessels or vessel components and / or to provide unauthorized information about the functioning of vessel components.Certain individuals or organizations might have an interest in experimenting with how a particular vessel component functions and / or causing a vessel component to operate unreliably or malfunction, thereby, for example, shutting down important vessel functions in the long term, short term, or permanently. According to embodiments of the invention, this can be avoided by the fact that the individual analysis modules are configured in isolation from each other, respectively, within their own container.

[0053] In addition, implementing exactly one instance of an analysis module per container facilitates container orchestration, for example, for load balancing, upscaling, or downscaling purposes, since the resource consumption of a Petition 870260066452, dated 06 / 07 / 2026, page 47 / 170 The 17 / 64 container is remarkably identical to, or closely correlated with, the resource consumption of the analytics module instantiated in that container.

[0054] According to embodiments of the invention, the container management software is configured to orchestrate the production of containers, instantiate and terminate the analysis modules (within those containers), such that one or more of the following effects occur: - In the event of failure or inaccessibility of one of the computers, the containers and analysis modules that are no longer available or accessible due to the failure or inaccessibility of one of the other computers are automatically started on one of the other computers; in this way, the robustness of the analysis functionality of a vessel can be increased in relation to the failures of individual computers; particularly in the military field, it must be taken into account that in combat situations, components of the vessel, such as individual computers and / or network links within a computer cluster, are destroyed or damaged or at least fail in the short term; due to the ability of the container management software to produce a new instance of the failed analysis module in such situations, this is particularly advantageous; and / or - In the event that the maximum number of instances of one of the current analysis modules on the computers is exceeded, automatically terminate one of these instances and / or delete one of the containers containing an instance of that analysis module, or move it to another computer; this can be advantageous, as it ensures that unnecessary CPU and memory resources are automatically released if they are no longer needed for analytical activities; in case of an emergency for vital systems, these free resources can be prepared as quickly as possible; the "maximum number," for example, can be a number that has been manually or automatically specified in a container management software configuration. The maximum means that a Petition 870260066452, dated 06 / 07 / 2026, page 48 / 170 18 / 64 exceeding this value is seen as undesirable, and induces a specific sequence or action, which is preferably appropriate to reduce the number of instances; and / or - In the event that a predefined maximum computer load is exceeded on one of the computers, automatically migrate at least one container hosted on that computer, along with the instance of the current analysis module on it, to another computer; the container management software can therefore perform load-balancing functions; and / or - In the event that a predefined minimum computer load is not reached on one of the computers, automatically migrate at least one container hosted on another computer, along with the instance of the current analysis module on it, to that computer; the container management software can therefore perform load-balancing functions; in some embodiments, one of these computers may be disabled for power saving or put into hibernation mode; and / or - In the event that a predefined maximum computer load is exceeded on one of the computers, automatically identify at least one container hosted on that computer along with the instance of the current analysis module on it (e.g., container with maximum CPU / memory consumption, or container containing an instance of a specific analysis module); instantiate a copy of that identified container along with the current analysis module on at least one other computer; run parallel analyses including at least the instance of the analysis module; the container management software can therefore perform upscaling functions; and / or - In the event that a predefined minimum computer load is not reached on one of the computers, automatically identify at least one container hosted on another computer, along with the instance of the current analysis module (e.g., the container with the highest CPU / memory consumption), and instantiate a copy of that identified container along with the module. Petition 870260066452, dated 06 / 07 / 2026, page 49 / 170 19 / 64 current analysis on it for that computer; and run analyses in parallel, including at least the instance of the analysis module in the identified container and the other instance of the instantiated analysis module; the container management software can therefore perform load-balancing functions; and / or - In the event that a predefined minimum computer load is not reached on one of the computers, automatically delete at least one container hosted on that computer; the container management software can therefore perform downscaling functions.

[0055] This can be advantageous, since in this way the consumption of CPU and working memory resources can be better distributed among the computers in the computer cluster, and a better reaction time can be obtained. In addition, it is possible to scale the containers according to need, and the analysis modules instantiated in them.

[0056] According to embodiments, at least some of the analysis modules are specifically allocated a portion of the database data. The data portions are stored in a protected manner, such that only the analysis module allocated to that portion of the data can access this data by reading and / or writing to it.

[0057] For example, allocation may occur in such a way that an analysis module, which was developed by a particular firm that also manufactured a component of the vessel or is in compatible relation with the manufacturers, has access to measurement data that is detected and stored by the sensors of that component of the vessel, however it does not have access to the measurement data of the sensors of other components of the vessel.

[0058] According to another example, allocation occurs in such a way that an analysis module, which was developed by a particular firm that also manufactured several components of the vessel, or is in compatible relation with the manufacturers of these components, has access to the measurement data that were detected and stored by sensors of these various components of the vessel. Petition 870260066452, dated 06 / 07 / 2026, page 50 / 170 20 / 64 The analysis module does not have access to measurement data from sensors on other vessel components.

[0059] According to another example, allocation occurs in such a way that an analysis module, which was developed by a particular firm that also manufactured one or more components of the vessel, or is in compatible relation with the manufacturers of these components, has access to the measurement data that were detected and stored by the sensors of one or more of these components of the vessel, and additionally has access to the measurement data that were stored in the database in general as freely accessible (for each analysis module of the vessel).

[0060] According to embodiments of the invention, the vessel analysis module may be the measurement data from the database according to any combination of the examples described herein.

[0061] The various forms of specific allocation of measurement data and analysis modules can be advantageous, since the manufacturers of vessel components can be assured that only the analysis modules in which these manufacturers trust have access to the measurement data generated by the sensors of these vessel components. The placement of sensors of various types in and / or on the vessel components of a military vessel by the manufacturer of the respective component has the advantage that important state parameters of the vessel component, such as temperature, vibration behavior, load parameters, environmental parameters, etc., become available. This measurement data is relevant to the vessel component manufacturer, for example, for testing, development and repair purposes, and for determining warranty claims.However, measurement data is also relevant to the vessel operator (for a better understanding of how the vessel component works and / or for a better understanding of the reciprocal effects of the vessel component with other components or parameters of the environment).

[0062] For the manufacturer of a vessel component and / or for the operator of Petition 870260066452, dated 06 / 07 / 2026, page 51 / 170 21 / 64 vessel results in the problem that disclosing all measurement values ​​eventually gives away information about the workings and conditions of internal components, which should remain internal to the firm, for example, to make it difficult for competitors to imitate and / or to prevent intruders from manipulating the vessel's components in a targeted manner. A manufacturer of vessel components, therefore, has no interest in disclosing measurement data relating to those vessel components.This currently prevents the integration of measurement data from sensors across various vessel components, which is a disadvantage for military vessel operators with respect to safety techniques, since many technically relevant effects, such as the specific behavior of a rudder, turbine, or other complex vessel component, result solely from the complex combined action of various vessel components that may exhibit different internal states.

[0063] The IT architecture according to which specific portions of the measurement data in the database are allocated to individual analysis modules, such that the modules can only selectively access the portions explicitly allocated to them, but not all measurement data stored in the database in general, can be advantageous because, based on this IT architecture, the operator of the military vessel can assure the suppliers or manufacturers of the respective vessel components (including their sensors) that the measurement data detected by the sensors is accessible only to specific analysis modules that have been considered and accepted by both parties as reliable. Therefore, an IT architecture is created that enables manufacturers of military vessel components to make sensitive measurement data available in a secure form only to specific analysis modules.The risk that a competitor or intruders might use the measurement data to imitate or access a component of the vessel can therefore be ruled out.

[0064] The operator of the military vessel benefits from the fact that, according to embodiments of the invention, measurement data from a multitude of Petition 870260066452, dated 06 / 07 / 2026, page 52 / 170 22 / 64 vessel components are prepared only for selected and reliable analysis modules: vessel component manufacturers in the military sector tend, until now, for measurement data from the sensors of vessel components produced by these manufacturers to be detected internally at best, and only analyzed by the internal computing units of the vessel components, without disclosing the measurement data externally or even storing it for a longer period of time.Thanks to the IT architecture of vessels according to the embodiments of the invention, vessel component manufacturers can now dispense with the component's internal computing units for the secret analysis of measurement data, since measurement data from various sensors and vessel components are stored centrally in a database, however not all analysis modules can access this data at will.

[0065] Some automation systems currently available for military vessels also offer access to sensor data from multiple sensors, however only to the respective valid real values ​​of individual systems, which do not contain or contain only historical profiles and trends of useful measurement values ​​that are impractical over a longer period of time. Due to the real-time requirements of such automation systems, the practice of overloading the scarce resources of the automation system with computationally intensive analyses of extensive historical data repositories has been avoided until now. Thanks to the distributed provision of the grouping of individual computers, however, according to embodiments of the invention, it is also possible to perform complex analyses, partially also in real time, and prepare them, without impairing the real-time capacity of the automation system.The problem that manufacturers of vessel components with integrated sensors are unwilling or unable to disclose the measurement values ​​they detect for various reasons has been overcome by an IT architecture that ensures only selected analysis modules with the corresponding rights can access the measurement values. Consequently, an IT architecture has been created that is particularly advantageous in... Petition 870260066452, dated 06 / 07 / 2026, page 53 / 170 23 / 64 context of the specific circumstances of military vessels,

[0066] According to embodiments of the invention, several of the analysis modules are specifically allocated to one of the vessel's components, and are configured to receive, directly or indirectly (through the database), analyze, and output the analysis result of the measurement data detected by one or more sensors of that vessel component to which they are allocated. Indirect reception through the database means that the measurement values ​​detected by the sensors are first recorded in the database and, in a second step, the analysis module accesses the measurement values ​​stored in the database. This indirect reception through the database has the advantage that the analysis modules do not need to have an interface in order to receive measurement data from a given sensor.

[0067] According to one embodiment, one or more sensors have registration rights in the database and are configured to store measurement values ​​in a suitable format in the database. For example, the sensors may have a network interface and be configured so that they continuously record the detected measurement values ​​in the database.

[0068] According to other embodiments, the sensors are configured to first store the detected measurement values ​​in a local volatile or non-volatile data memory of the sensor. Another component of the vessel (e.g., the automation system of one of the analysis modules or other software) reads the locally stored measurement data and records it in the database, so that the analysis modules can now access the measurement values ​​through the database.

[0069] According to embodiments of the invention, at least one of several analysis modules, which is allocated to one of the vessel's components, is configured to perform an analysis that includes: - an assessment of current or future critical states of one of the vessel's components; and / or Petition 870260066452, dated 06 / 07 / 2026, page 54 / 170 24 / 64 - a forecast of the time when a vessel component will enter a critical state; and / or - the automatic identification of one or more environmental parameters and / or vessel component parameters that are originally associated with a critical state of one of the vessel's components; and / or - a calculation of a handling recommendation for a person in relation to one of the vessel's components; and / or - a calculation of a control command to one of the vessel's components for the automatic execution of the control command.

[0070] This can be advantageous, since one or more analysis modules can be used not only to recognize individual correlations and relationships retrospectively, but can also be used technically, based on the historical measurement data from various sensors stored in the database, and / or predict tactically critical situations within or on the vessel, as well as predict handling instructions and control commands that can help avoid or mitigate the critical situation. The analysis modules can thus assume functions that were previously performed exclusively by the automation system.While the automation system is typically inflexible, since it typically integrates measurement values ​​from a predefined number of sensors from a predefined number of vessel components, the use of analysis modules in addition to the automation system is advantageous. This is because the analysis modules, according to the embodiments of the invention, are instantiated within an IT architecture that is highly available, robust, and easily scalable based on container virtualization and automatic container orchestration, and which securely protects the measurement data of the vessel components against access by unauthorized third parties.

[0071] According to embodiments of the invention, the sensors of at least one of the vessel's components contain at least one cryptographic encoding key. One of the analysis modules is coordinated to at least one vessel component and contains a decoding key corresponding to Petition 870260066452, dated 06 / 07 / 2026, page 55 / 170 25 / 64 this cryptographic encoding key. In the case of the two corresponding keys of the sensor and the analysis module, it may be a secret “symmetric” cryptographic key, which is used for both encoding and decoding the measurement values. Alternatively, in the case of the two corresponding keys, it may be a pair of asymmetric cryptographic keys, where the key managed and stored by the sensor is a public cryptographic key (encoding key) and the key managed and securely stored by the analysis module is a private cryptographic key (decoding key). The sensors of at least one component of the vessel are configured to store at least some of the measurement values ​​detected by them in encoded form in the database, and / or transmit them directly to the analysis module allocated to at least one component of the vessel.

[0072] At least one analysis module is configured to decode at least some measurement values ​​with the decoding key and analyze the decoded data.

[0073] According to embodiments of the invention, all sensors that are placed within or on the same vessel component have the same public encoding key. According to other embodiments of the invention, all sensors of at least one of the vessel components have their own public key, which differs from the public key of the other sensors of that vessel component.

[0074] This can be advantageous, since the use of coding methods offers a particularly high degree of security, as the measurement data from the sensors of a specific vessel component can only be read and interpreted exclusively by authorized analysis modules.

[0075] According to embodiments of the invention, the sensors of at least one of the vessel's components contain a signature key. The signature key preferably belongs to a PKI from a manufacturer of that vessel component. One of the analysis modules is coordinated to at least one vessel component and contains a signature verification key that Petition 870260066452, dated 06 / 07 / 2026, page 56 / 170 26 / 64 corresponds to this signature key. The sensors of at least one vessel component are configured to sign at least some of the measurement values ​​detected by them with the signature key, and store them in signed form in the database and / or transmit them directly to the analysis module allocated to at least one vessel component. The at least one analysis module is configured to verify at least some measurement values ​​with the signature verification key and to analyze the signed data only if the signature verification results in the signature being valid.

[0076] This can be advantageous, since in this way the vessel operator is protected from an attack on the stability and integrity of the military vessel due to a manipulated vessel component and / or manipulated sensors generating false analyses and predictions. In particular, when these analyses and predictions are automatically converted into corresponding control commands, there is a risk that such manipulation could damage the vessel in the short or long term, or render it inoperable. For example, a particular analysis module might normally be used to predict the future course for the next 5 km based on GPS position data, the current turbine rotation speed, and the current rudder angle. A manipulated rudder angle sensor could provide incorrect angle data, leading to the vessel's course being calculated incorrectly.This can lead to the ship actually being on a different course than planned, and hitting the bottom or colliding with rocks. This risk can be eliminated because the sensors sign the measurement data they generate, and the signature refers to a trusted instance, for example, a specific manufacturer. Because the analysis module verifies the signature of the measurement data before using it, it can be ruled out that tampered sensors and / or tampered vessel components pose a threat to the vessel and crew.

[0077] According to embodiments of the invention, one or more of the analysis modules are configured respectively to edit their analysis result to a user and / or to the analysis system and / or store it in the database. Petition 870260066452, dated 06 / 07 / 2026, page 57 / 170 27 / 64

[0078] The results, for example, can be displayed on a screen, printed using a printer and / or broadcast through a loudspeaker. Alternatively, the results can be sent to a software or hardware component, for example, to an automation system.

[0079] This can be advantageous, since the results integrate data from a multitude of sensors from a multitude of vessel components and / or environmental parameters, and in this case, not only current measurement data but also historical measurement values ​​can be considered. Since the analysis modules are implemented as individual, isolated software modules, the number and composition of the analysis modules can be easily adapted over the life of the vessel to the possibly modified composition of the vessel's components. Consequently, the analysis results from the analysis modules represent a source for system diagnostics and control commands, which complement the automation system functions in a particularly flexible way.Depending on the type of analysis and implementation result, the analysis results can be handling recommendations for a user, which must be executed manually by the user. They can also be handling recommendations that can be executed automatically by the vessel's components, requiring only manual confirmation by the user. Alternatively, they can be control commands that can be given directly to the analysis modules or the automation system without directly involving the user, causing the system to automatically perform the action specified in the commands, for example, opening an exhaust air valve, correcting rudder angles, etc.

[0080] According to embodiments of the invention, at least one of the analysis modules is configured to perform an analysis (e.g., correlation analysis, machine-learning (MN)-based prediction, rule-based prediction, etc.) on the measurement values ​​of several (at least two) different sensors from several different vessel components. The analysis includes: - an assessment of current or future critical states of a component of Petition 870260066452, dated 06 / 07 / 2026, page 58 / 170 28 / 64 vessel; and / or - a forecast of the time when a vessel component will enter a critical state; and / or - the automatic identification of one or more environmental parameters and / or vessel component parameters that are originally associated with a critical state of one of the vessel's components; and / or - a calculation of a handling recommendation for a person; and / or - a calculation of a control command to one of the vessel's components for the automatic execution of the control command.

[0081] This can be advantageous, since the ML-based method and various forms of correlation analysis are particularly appropriate for, from historical measurement values ​​of several different parameters, recognizing complex, comprehensive component dependencies and reciprocal effects, both linear and non-linear, and based on these recognized dependencies, calculating predictions about current and future system states.

[0082] According to embodiments of the invention, the database data is distributed and / or stored redundantly across multiple computers.

[0083] This can be advantageous, since it increases security against failure, in case one of the computers fails or is inaccessible. In addition, redundant storage allows parallel access to copies of the same data and, therefore, speeds up queries.

[0084] According to embodiments of the invention, the database data is stored in a distributed manner across multiple containers on multiple computers (the containers are therefore instantiated on multiple computers, and on some computers, multiple containers may also be instantiated). The container management software is configured to orchestrate the creation of containers and the storage, retrieval, and deletion of data within the containers, such that: - In normal operation, the database data is redundantly stored in a distributed manner across various computers, such that in Petition 870260066452, dated 06 / 07 / 2026, p. 59 / 170 29 / 64 In the event of failure of one or more of the computers, this data can be reconstructed from the data stored on the remaining computers; and / or - In the event of a computer failure, another computer is automatically identified, in which a copy of the data portions stored on the failed computer is made, and the data contained on that other computer is prepared for the analysis modules and the automation system (for example, by starting that other computer, granting access to partial data, etc.); and / or - In the event of a computer failure, a redistribution of at least a portion of the redundant stored data distributed across multiple containers will be automatically performed, so that the previous level of redundancy of the database data is restored; and / or - In the event that a predefined maximum memory requirement is exceeded on one of the computers, automatically migrate or copy at least part of the database data stored on that computer to another computer; for this, load balancing functions such as those already included in Kubernetes software can be used.

[0085] This can be advantageous for analogous reasons such as the redundant instantiation of analysis modules on multiple computers. Preferably, availability and fail-safe are increased, and access times are shortened due to parallel access.

[0086] According to embodiments of the invention, at least some of the computers in the computer network are contained respectively in a suitable safety container, which is fire-resistant and / or pressure-resistant and / or watertight.

[0087] For example, the safety container may consist of a single-walled body or preferably several walls; the body may be made, for example, of steel and be provided with a door with its own locking or latch mechanism. Preferably, the safety container is Petition 870260066452, dated 06 / 07 / 2026, p. 60 / 170 30 / 64 watertight and / or pressure wave stable. For example, the body may contain cable passage openings on the rear side, and integrated cooling to prevent, on the one hand, water and / or pressure penetration and, on the other hand, overheating. While, therefore, in the case of “containers” we are talking about software or operating time environments for programs, which are instantiated on a computer, in the case of safety containers we are talking about physical containers, which may contain one or more computers.

[0088] This can be advantageous, since the computers, and therefore the analysis programs and containers, are protected from damage in the event of a leak or detonation (pressure wave, fire).

[0089] According to embodiments of the invention, the computers in the computer network comprise one or more first computers, and one or more second computers. The first computers and the second computers are accommodated in different spatial areas of the vessel, the different spatial areas being different cabins, different decks, different chambers separated by watertight doors, to the starboard and port sides of the vessel or on the bow and stern sides of the vessel.

[0090] This can be advantageous, since it increases safety against ship and analysis module failure: if certain areas of the ship have to be damaged due to a detonation or malfunction, not all analysis modules are affected. On the contrary, the container management software can be in the containers.

[0091] In another aspect, the invention relates to a system comprising at least two military vessels according to one of the embodiments or examples described herein and a computer system. The computer system contains an interface for the secure import of the contents of the databases of the at least two vessels. In addition, the system contains fleet analysis software. The fleet analysis software is configured to analyze the measurement values ​​from the databases of the at least two vessels. The fleet analysis software is configured to automatically recognize whether the values ​​of Petition 870260066452, dated 06 / 07 / 2026, page 61 / 170 31 / 64 measurements of different vessels of the same type of vessel were detected, and the analysis includes: - recognition of those vessels whose entirety of the vessel's components is in the best or worst condition with respect to at least one technical evaluation criterion (e.g., tank fill level, availability of energy resources, time until next maintenance, failure safety indicator, indicator of the vessel's suitability for a given use scenario); and / or - recognition of the critical states of a vessel component in one or more vessels; for example, through analysis of historical measurement data, it may be recognized in the databases of various vessels that, in the case of a few vessels, a combination of rudder positioning angle and turbine rotation speed, which was not problematic in most vessels, caused an unstable state of the vessel, making manual intervention necessary, such that these few vessels should be taken for inspection; certain vibration patterns may reveal that a vessel component of a particular vessel suffers from material fatigue or is negatively influenced by vibrations and movements of adjacent components, such that an inspection seems advisable for that vessel as well; and / or - a prediction of the timing of the onset of a critical state of a vessel component in one or more vessels; for example, the moment when, in the face of material fatigue that can be derived with the aid of vibration values, and / or in the face of the usual maintenance intervals, each vessel has its next inspection date, such that the vessel whose predicted inspection date is furthest in the future can be considered the most appropriate for longer current use; and / or - the automatic identification of one or more environmental parameters and / or parameters of the vessel's components, which are originally for a Petition 870260066452, dated 06 / 07 / 2026, p. 62 / 170 32 / 64 critical condition of one of the vessel's components in one or more vessels; for example, fleet analysis software may recognize that only those ships that were en route in waters with a water temperature below 6°C had problems releasing a movement with a particular component, such that it is natural to assume that material contraction at low temperatures was the solution to the problems and the component is not suitable for use at low temperatures. Analyzing multiple vessels in this case may eventually make it possible to discover causes that, without evaluating data from multiple vessels, would not have been, or probably would not have been, recognized.

[0092] In the case of fleet analysis software, it may be a single, complex application program or a combination of several individual analysis programs, which can perform various types of analysis on historical measurement values ​​detected by sensors on various vessels over a period of hours, days, weeks, months, or years.

[0093] According to some implementation systems, the computer system that hosts the fleet analysis software also contains a decryption key and / or signature verification key, and these keys are prepared by the manufacturer(s) of the vessel components or vessels if the manufacturers release these keys to the client, therefore to the vessel operator.

[0094] In this context, a "military vessel" is understood to be a vessel configured for use by the armed forces in carrying out their tasks. Often, vessels for military purposes have specific adaptations, for example, reinforced walls or hulls for mine protection, camouflage paint, and weapons and / or defense systems. Vessels are vehicles designed for locomotion on or in water. Preferably, they may be sailing or mechanical vessels, for example, sailboats, inflatable boats, hydrofoils, submarines, frigates, aircraft carriers, supply ships, etc. For example, some frigates may be configured and equipped for surveillance. Petition 870260066452, dated 06 / 07 / 2026, page 63 / 170 33 / 64 maritime, submarine hunting, surface combat units, and defense against air attacks for their own ship or for training. Supply ships are configured to support naval task forces, which may be composed of different ships and boats in a task-oriented manner. The main logistical task of a supply ship consists of supplying fuels, consumables, provisions, and ammunition. In this case, a supply ship may also be equipped with a weapons system, for example, in order to prevent enemy attacks.

[0095] A “vessel component” herein is understood to be a part of the vessel which, as a whole, fulfills at least one specific function. A vessel component may be a single component, i.e., an individual part of a technical complex, or a system composed of several components which together fulfill that function. Typically, all the elements of a specific vessel component are incorporated into a vessel as a unit. For example, a steering system, a radar system, a weapons system, an engine unit, a control unit, etc., may respectively represent a vessel component.

[0096] As a “sensor”, also known as a detector, recorder (of measurement or measurement variables) or sensor (of measurement), is a technical component that can detect certain physical or chemical properties (physical, for example, amount of heat, temperature, humidity, pressure, sound field variables, brightness, acceleration or chemical (for example, pH value, ionic strength, electrochemical potential) and / or the material property of its environment qualitatively or quantitatively as a measurement variable. These variables are detected by means of physical or chemical effects and are converted into an electrical signal that can be further processed. In this case, the electrical signal that can be further processed may especially comprise data that can be processed in terms of data technology, which represents a representation of the variable.The electrical signal that can be processed later does not necessarily have to be generated in the detector itself, but can also be generated from the output signal. Petition 870260066452, dated 06 / 07 / 2026, page 64 / 170 34 / 64 of the detector by electronic components connected to the detector.

[0097] In this context, a "weapon system" refers to technical defense equipment (often complex), in particular large-scale military equipment. A component of the weapon system is the weapon itself. For example, a warship may contain armament in the form of anti-aircraft missiles within a weapon system configured as a short-range defense system. In particular, a weapon system may be a grouping of individual technical elements that interact with each other and, through this grouping, achieve an enhanced or absolutely feasible armament effect.

[0098] For example, a “Common Remotely Operated Weapon Station” (CROWS) is a weapon system. Another example of a weapon system is a cannon mounted on a tank or on a ship's deck. Depending on the embodiment, the ship's engine power is used both to propel the ship and to direct the cannon, or the weapon system contains its own independent motor for cannon alignment. An anti-aircraft missile system is another example of a weapon system. The various elements, such as sensors (e.g., a radar system), control station, and launch facility of the anti-aircraft missile system can detect various measurement data that are processed for monitoring, status control, and correct alignment of the radar system and / or missiles.

[0099] In this case, a “drive unit” is designated as the structural unit that drives a machine, for example, a ship's turbine, by means of energy conversion. It is often a motor with a reduction gear that may be necessary. The drive unit may contain a rotary drive or a linear drive. The drive unit may obtain its energy from fossil fuels (especially oil, natural gas, coal), nuclear energy (nuclear disintegration), battery energy, and other energy sources.

[00100] As a “navigation system” in this case, it is understood to be a system Petition 870260066452, dated 06 / 07 / 2026, page 65 / 170 35 / 64 technician who, with the aid of position determination (satellite, radio, GSM or inert or autonomous system) and geographic information (topology maps, road, aerial or maritime maps), enables route guidance to a selected location, or a route taking into account the desired criteria.

[00101] As a “measurement value” in this case is the value of a measurement variable that is provided by a sensor. Examples of measurement values ​​are, for example, a temperature in °C, a position in the form of a GPS coordinate indication, a rotational speed in revolutions per minute, etc. “Measurement values” are also referred to as “measurement data”.

[00102] In this context, a "database" is understood as a data structure for the structured storage of data. A database can be a directory tree or a file. A database is preferably a data structure managed by a database management system (DBMS). A DBMS is a system for the electronic management of data, configured to store large amounts of data efficiently, consistently, and permanently, and to prepare necessary subsets in different forms of representation based on the needs of users and application programs. A database system provides a database language for querying and managing the data. The database can be a relational database. The data structure is determined by a database model.

[0100] In this case, a “measurement value history” is understood to be a quantity of data that specifies the time course of several measurement values.

[0101] As a “time stamp” is understood in this case, a data value that specifies a particular instant, for example, the instant (date and time indication) when a particular measurement value was detected. Timestamps are preferably specified in Coordinated Universal Time UTC, or with reference to that time. This can prevent possible misunderstandings due to globally different time zones.

[0102] How is the expression “persistently stored” understood here a Petition 870260066452, dated 06 / 07 / 2026, page 66 / 170 36 / 64 data storage on a non-volatile storage medium.

[0103] The term “protected storage” here refers to data storage that technically guarantees that only a specific selection of users and / or applications that can present themselves as authorized can access the protected data by recording and / or reading it. For example, protection may consist of storing the data in an access-protected area and / or storing the data in an encrypted form, such that it can only be read by a program that possesses an appropriate decryption key.

[0104] A “real-time capable” system, for example, a real-time capable automation system, is a system that is configured to perform a task in “real time.” This means that the system is in a position to continuously perform that task within a predefined maximum duration. Typically, this means that the said hardware and / or software system is subject to a “real-time constraint,” for example, from the event to the system's reaction. Real-time programs must guarantee a reaction within specified timeframes, which are often referred to as “time limits.” Real-time responses are generally understood to be on the order of milliseconds, and sometimes microseconds or seconds. A system that is not specified as operating in real time generally cannot guarantee a response within a given time period, although typical or expected response times may be indicated.

[0105] A “host” or “host computer” here is understood to be a computer that, alone or in cooperation with one or more other computers, prepares a specific software program (guest software program), that is, makes it available to other programs and / or users. In the case of the guest program, it may be a database, an application program, a maintenance program, or other programs and program modules.

[0106] A “container” here is understood to be a runtime environment for software programs, which contains and makes available to them all the system components necessary for the execution of those software programs, and which isolates the Petition 870260066452, dated 06 / 07 / 2026, page 67 / 170 37 / 64 software programs run within this container versus programs outside the container. A container can be a virtual machine that is created and managed by a hypervisor (a program for managing virtual machines). A container is preferably a runtime environment that can be managed through a container virtualization program. According to these embodiments, containers typically require fewer resources than virtual machines, since they dispense with starting their own operating system and instead run within the context of the guest operating system. Despite this, containers are isolated from each other and from the host system, even if not as much as in the case of virtualization.

[0107] For example, the open-source software “Docker” can be used to define containers and isolate applications from each other through container virtualization. Docker simplifies application deployment because containers containing all the necessary packages can be easily transported and installed as files. Docker packages the application and all the system components necessary for its execution into a single file called a “container.” Docker containers ensure that the application runs reliably after being moved from one environment to another. This not only simplifies the deployment of complex applications across different computers but also provides a more flexible application infrastructure that is easier to change, expand, and scale.

[0108] Container virtualization is a method for operating multiple instances of an operating system (called "guests") isolated from each other on a host system. In contrast to virtualization via a hypervisor based on multiple virtual machines, container virtualization has some limitations on the type of its guests, but is considered particularly resource-friendly. Container virtualization is based on several principles that are implemented differently in individual software products for container virtualization. However, a core of it is always similar: multiple containers share a core and isolate each other from at least some of the... Petition 870260066452, dated 06 / 07 / 2026, page 68 / 170 38 / 64 operating system resources used.

[0109] For example, the open-source program Kubernetes can be used as a container management program. In the case of Kubernetes, it is software for container orchestration, which makes it possible to easily and efficiently orchestrate applications across multiple hosts. Kubernetes allows for simplified or even fully automated deployment, operation, maintenance, and scaling of container-based applications. The groups of hosts running the containers are grouped into clusters of physical or virtual machines and managed as a unit. Kubernetes defines a Container Runtime Interface (CRI) that container platforms need to implement in order to be orchestrated through Kubernetes. These implementations are also referred to as "shims".This makes Kubernetes platform-independent: in addition to or instead of Docker, other platforms with appropriate buffers can also be used, such as CRI-O or KataContainers.

[0110] A “Container management software” is understood here as software that is configured for the automated preparation, scaling, and management (“orchestration”) of multiple (at least two) containers on multiple computers in such a way that the computers serve respectively as host systems for one or more containers, wherein the containers (from the same host computer system as well as different host computer systems) are isolated from each other. In the case of multiple containers in complex vessels, this could involve several hundred containers. For example, Kubernetes can be used as container management software.

[0111] An “analysis module” here is understood to be software configured to process measurement data from one or more sensors using one or more different computational methods, in such a way that an answer to an analytical question is generated. The software may be a script, a complex application program, a program library, or a combination of two or more of these possibilities. Petition 870260066452, dated 06 / 07 / 2026, page 69 / 170 39 / 64 above. The computation method can be a heuristic, a rule explicitly specified by a programmer, a mathematical and, in particular, statistical algorithm, for example, a correlation analysis method or some other explicitly formulated computation method. The computation method can also be a method formulated only implicitly, for example, in the form of the mathematical model of a machine learning process created during a training process. For example, the model can be specified in the network architecture and the network node weights of a neural network. The analytical question can refer to various questions, for example, a question about the current or predicted future state of a vessel component (parameters for vibration, conductivity, elasticity, etc.).Do these indicate a critical state of wear?), or a question about the coincidence of which measurement parameter values ​​a critical state of the system has been reached or is likely to be reached in the future, a question about the current and future availability of fuel or wear parts, or a question about a recommended measure to avoid or mitigate a current or future critical state of the vessel or a component of the vessel.

[0112] Here, an “encryption key” is understood to be a cryptographic key that is configured for use in data encryption. With symmetric processes, that is, with all classic cryptographic methods and also with modern algorithms such as, for example, the Data Encryption Standard (DES) or its successor, the Advanced Encryption Standard (AES), both communication partners use the same (secret) key for both encryption and decryption. Asymmetric methods, such as the RSA cryptographic system, use key pairs consisting of a public key and a private key. The public key is not secret; it is disclosed at least to the party that must send the data in encrypted form to the owner of the secret key. The data can be encrypted with the public key.In this case, it is important that a public key can be uniquely linked to a specific entity, for example, a user or an analysis module. The private key is needed to decrypt it again. Petition 870260066452, dated 06 / 07 / 2026, pages 70 / 170 40 / 64 secret text. In contrast to symmetric methods, in which multiple parties share a secret key, in asymmetric methods only one party possesses the private (secret) key. Therefore, it is fundamental that the private key cannot be derived from the public key.

[0113] An “automation system” herein is understood to be a system for the fully automatic or semi-automatic control of a vessel. Control occurs by means of fixed rules based on current measurement values ​​from one or more sensors, which are converted into control commands by the automation system, and / or occurs based on control commands that a user enters through a user interface. The automation system is preferably a real-time capable automation system. According to embodiments of the invention, the automation system is configured not only to receive the current measurement values ​​and / or manually entered control commands as input, and to control the vessel accordingly, but also to receive the results of analyses from one or more analysis modules, wherein the automation system interprets and converts the results into control commands.

[0114] A “computer cluster” or computer cluster, generally referred to simply as a cluster, is understood here as a number of networked computers. The cluster can be configured in such a way that the computing capacity and / or availability of the computers or the services they provide is increased. The computers that are in a computer cluster (also “nodes”) are often also referred to as servers. According to embodiments of the invention, the computers in the computer cluster host one or more containers whose distribution among the computers is orchestrated by container management software. Analysis modules or other programs can be run in the containers, which can be implemented as a service, for example, and whose results can be prepared for specific components of the vessel.Because of this function of preparing analysis results, computers can also be referred to as "servers". Petition 870260066452, dated 06 / 07 / 2026, page 71 / 170 41 / 64 Brief description of the drawing

[0115] The following will describe embodiments of the invention with reference to the drawing. The drawing shows: In Fig. 1A, a block diagram of a military vessel with various vessel components equipped with sensors; In Fig. 1B, a system comprising several military vessels and a computer with fleet analysis software; Fig. 2 shows a block diagram of a distributed computer system that can be used for storing and analyzing sensor measurement data; Fig. 3 shows several pairs of asymmetric cryptographic keys specific to the analysis module and their use; Fig. 4 shows components of a military vessel with various databases and analysis modules.

[0116] Figure 1A illustrates a block diagram of a military vessel 100 with various vessel components equipped with sensors. For example, the vessel components comprise a propulsion system 104 containing, for example, a marine diesel-powered engine with a gearbox coupled to the engine. The propulsion system contains various sensors for measuring various parameters of the engine and gearbox, including a sensor 112 for the number of rotations of a shaft, which is mechanically coupled to the gearbox.

[0117] The vessel's components also comprise a navigation system 106 with a GPS sensor 114 for determining the vessel's current position, as well as a rudder 108 with a position or angle sensor for determining the rudder's current angle relative to the vessel's longitudinal axis. In addition, an electronic monitoring unit 110 with various sensors is installed on the vessel as another component of the vessel, which contains various sensors 118, 120. The sensors of component 110 automatically determine the vessel's and the environment's parameters and Petition 870260066452, dated 06 / 07 / 2026, page 72 / 170 42 / 64 preferably continuous or repeated. These parameters include, for example, air pressure, air humidity, air temperature, water temperature, water current intensity and / or other parameters.

[0118] All or some of the detected parameters are transmitted to an automation system 124 immediately after their detection. The automation system is a fully automatic or semi-automatic system for monitoring and controlling the internal states of the vessel, as well as for controlling the movement or other actions of the vessel or its components. The automation system is a real-time system, which is configured to use the measurement values ​​received from the sensors, and user inputs via a user interface to control the vessel based on them.

[0119] Over time, a large number of measurement data are accumulated during the ship's operation, which are provided with a timestamp reflecting the date the measurement data was generated. The measurement data and its timestamp are stored in a database 122 and thus form a history of the values ​​of the parameters detected for one or more measurement parameters. In the case of the database, it is, for example, a relational database, such as PostgreSQL or MySQL, or, for example, a NoSQL database.

[0120] The database, as well as various analysis modules for data analysis, are stored and instantiated in a computer system 126. The computer system 126 can be a stand-alone monolithic computer system. However, preferably, the system is a computer network comprising several computers, which are linked to form a functional unit. Such a computer network is described in more detail, for example, with respect to Figure 2.

[0121] In addition, the vessel comprises a weapon system 102, which also contains sensors (not shown). Since, by virtue of the weapon system, the vessel is also a significant target for enemy forces and, moreover, represents a potential danger to the crew itself and also to Petition 870260066452, dated 06 / 07 / 2026, page 73 / 170 43 / 64 third parties not involved in the event of a faulty control, safe operation of the automation system is of particular importance. A “safe operation” in this case means that the automation system, as well as the data on which this system bases its decisions, need to be protected against manipulation by third parties. Example 1: Improved monitoring and control of a rudder system.

[0122] For example, in the case of a vessel, it could be a deep-sea vessel with a rudder system, in particular, a double rudder system. The rudder system has a control system, which is configured to monitor the rudder position and control it through an adjustment system.

[0123] In the state of the art, systems of this type are monitored only in accordance with SOLAS (International Convention for the Safety of Life at Sea) and, therefore, are monitored only in a rudimentary way (collective alarm). The accuracy of the monitoring is often insufficient for military vessels: with the twin rudder systems currently available, it may happen that the rudders do not react synchronously to the rudder position control commands: for example, the starboard rudder reaches a rudder position faster than the port rudder reaches a corresponding rudder position control command. Even in the case of simultaneous arrival of commands, one side of the rudder system may not be able to convert the command as quickly as the other side.This asynchrony impairs the performance of the rudder platform and hinders precise control of other system components, for example, the armament system. The reasons for asynchronous transmission and / or command conversion can be varied and interact in complex ways: different sliding properties of the rudder stocks, aged potentiometers in the corresponding circuits, different control pressures, and much more.

[0124] The embodiments of the invention address this problem as follows: a rudder system containing a large number of sensors is used for various Petition 870260066452, dated 06 / 07 / 2026, page 74 / 170 44 / 64 different rudder system-specific parameters, referred to herein as “rudder system parameters”. Rudder system parameters include two or more of the following parameters: rudder system oil circuit pressures, rudder system electrical control system voltages, rudder system electrical control system currents, rudder positions and / or accelerations occurring (particularly vibrations) in the rudder stocks. Rudder system sensors are configured to perform a measurement of a rudder system parameter regularly within relatively short time intervals (e.g., at least once per minute, preferably at least 10 times per second), optionally encode and / or sign this measurement value and store it in a database in association with a date stamp.In some embodiments, the sensor's detection frequency can also be dynamically adapted to circumstances, for example, increasing the measurement frequency by changing one or more relevant parameters above a predefined limit value. The timestamp can indicate, for example, the instant when a measurement value is stored in the database, this instant being very close to the instant of detection of the measurement value and therefore also representing that instant at least approximately. The rudder system's rudder position data are also detected by sensors as "rudder system parameters," so that the control system can determine whether the rudder system's rudders have reached the positions they should assume according to the control commands.

[0125] In addition to these “rudder system parameters”, several other sensors inside or outside the rudder system detect values ​​of environmental parameters, for example, ship speed, water temperature and / or water depth and / or operational states of other vessel components, for example, a pumping system. If, for example, the ship speed (measured, for example, in meters of distance traveled per second) is not available, then propulsion power and / or the turbine revolutions can alternatively be used as an indicator of speed. Petition 870260066452, dated 06 / 07 / 2026, page 75 / 170 45 / 64

[0126] The embodiments implicitly detect the times that a rudder system requires until the rudders, under given environmental conditions and in the given rudder state, convert the respective given control commands and have reached the desired positions, since the measurement data and, preferably, the control commands are also date-stamped and stored in the database. Through analysis of the history of these measurement values ​​or commands by an analysis module, the measurement values ​​and the rudder machine states can be easily related to the instants at which the control system sent control commands to the adjustment system.

[0127] According to embodiments, an analysis module is prepared which, with the aid of measurement values ​​of the rudder system parameters, environmental parameters and rudder system control commands detected and stored in the database and linked to timestamps, determines the times until a control command, under the respectively prevailing conditions, has been completely converted by the rudders affected by the command. The determined times are used by the analysis module to adapt the sending of control commands and / or the content of the control commands, in such a way that the synchronization of the rudder system rudders is improved.

[0128] Depending on the embodiment, the analysis module is configured, for example, to recognize correlations between measured rudder application times and ranges of rudder system parameters and environmental parameters. Therefore, a large number of factors are taken into account, not just a current deviation of the rudder position from the theoretical position, in order to determine if and when a rudder will assume a desired position. Any asynchronies that may occur between the port and starboard rudders can thus be recognized in advance and reliably, enabling proactive reaction and real-time adaptation of control commands to individual rudders quickly and dynamically, according to the preferred embodiment. Furthermore, predicting asynchronies allows forecasting the necessary maintenance work and facilitates planning in this regard. Petition 870260066452, dated 06 / 07 / 2026, page 76 / 170 46 / 64

[0129] The analysis module for improved rudder system control can identify potential causes of asynchronies, for example, using acceleration or vibration data, and send them to a user. In this case, however, not only acceleration data (oscillations / vibrations), but also other rudder system parameter values ​​and environmental parameter values ​​are taken into account in the analysis. This can be advantageous, since the oscillations and vibrations that occur depend heavily on water depth, rudder position, sea state, barnacle presence, rudder system circuit states, and ship speed. Therefore, without considering the context, acceleration data is often insufficient to enable precise rudder system control or an accurate prediction of the date for the next necessary maintenance.An analysis of acceleration data in combination with other rudder system parameters and environmental parameters, on the other hand, makes it possible to identify oscillation states that reveal something about the actual deviation of a rudder's real position from a theoretical rudder position, or the current state of fatigue of the rudder system material.

[0130] According to one embodiment of the invention, the vessel's components comprise a rudder system with a control unit, one or more starboard rudders and one or more port rudders. The control unit is configured to coordinate, in particular to synchronize, the position and movement of the starboard and port rudders by sending control commands to the starboard rudders on the one hand, and to the port rudders on the other hand. The rudder system contains several sensors, which are configured for the detection of rudder system parameter values, wherein the rudder system parameters comprise two or more of the following measurement parameter values: current rudder position, rudder vibrations, barnacles on the rudders (for example, by means of an optical sensor or with a force sensor that measures the force in the direction of the incoming current), oscillations of the rudder system components, rudder system circuit states.

[0131] One or more of the other components of the vessel and / or the steering system Petition 870260066452, dated 06 / 07 / 2026, page 77 / 170 47 / 64 also contain, in addition, several sensors, which are configured to record environmental parameter values, wherein the environmental parameters comprise two or more of the following measurement parameter values: water depth, sea state, ship speed.

[0132] One of the analysis modules is an analysis module for improved rudder system control, and is configured to analyze the values ​​of the rudder system parameters, the values ​​of the environmental parameters, as well as the time period between sending control commands from the control unit to the respective rudders until the conversion of the control commands, in order to recognize correlations between the time periods, the values ​​of the rudder system parameters and the values ​​of the environmental parameters and / or to improve the coordination of the rudder system rudders.

[0133] For example, for improved rudder system control, the analysis module can be configured to automatically determine that, given the existing sea and barnacle conditions, the command to the starboard rudders should be sent 400 milliseconds before the corresponding control command to the port rudders. The analysis module sends a corresponding control command to the rudder system control unit, causing the control unit to send the command to the starboard rudders to the port rudders only after the aforementioned delay.

[0134] According to embodiments of the invention, the analysis module for improved rudder system control is configured to analyze rudder system parameter values, environmental parameter values, the time periods between the transmission of control commands from the control unit to the respective rudders and the conversion of the control commands, and additionally, to analyze state and / or vibration parameter values ​​detected by sensors on other vessel components, in particular the engine and / or gearbox and / or a radar system, in order to recognize correlations between the time periods, rudder system parameter values, environmental parameter values, and to recognize state and / or vibration parameter values. Petition 870260066452, dated 06 / 07 / 2026, pp. 78 / 170 48 / 64 vibration of other vessel components and / or to improve the coordination of the rudder system.

[0135] These characteristics are based on the observation that vessel components, which are not explicitly related to the steering system control, can also influence the behavior and controllability of the steering system. Thus, for example, a radar system can be excited by the frequency generated by a diesel drive engine at a given speed, which leads to a negative influence on the steering system.

[0136] For example, control can be implemented in the form of logical rules. In addition to the steering system control described here, these rules can also be used to control other components of the vessel. For example, one of the logical rules might state that an internal combustion engine can only start if at least one exhaust gas path is open. This rule is executed each time this engine starts and, depending on the result of the check, either if an exhaust gas path is open, that exhaust gas path is automatically opened or the starting process is interrupted - possibly accompanied by a message to the user. Example 2: Improved recognition and prediction of consumption and states.

[0137] Environmental parameters and parameters related to the state of vessel components are complexly interdependent.

[0138] If, for example, the seawater temperature is higher, cooling systems that use seawater for cooling operate differently than those using cold seawater. Current consumption increases, and the diesel engines used for current generation are subjected to higher loads. This, in turn, has effects on the maintenance and wear of the components, which are not only subject to higher loads due to a higher seawater temperature because more energy has to be used for cooling, but are also less able to perform their own cooling, since the machinery and capsules are generally also cooled with seawater, as is the engine itself. The characteristic performance values ​​of the vessel components Petition 870260066452, dated 06 / 07 / 2026, page 79 / 170 49 / 64 cooled with seawater are therefore often difficult to compare, and predictions regarding their energy consumption are subject to uncertainty.

[0139] According to embodiments of the invention, one of the analysis modules is configured to calculate the current or future energy consumption and / or the current or future degree of wear of a vessel component, as a function of the ambient water temperature used as cooling water.

[0140] With this database, for example, similar operating modes of the entire vessel can also be automatically found, for example, operating modes that are defined by the ambient water temperature, in order to take into account the evaluation of measurement data and / or other performance parameters of the entire vessel, so that only comparable operating modes of the vessel can be compared with each other.

[0141] According to the embodiments, an analysis module is configured to use the temperature measured at different instants to also automatically identify similar operating modes of the entire vessel, which are defined by a specific temperature or by a specific temperature range of the ambient water. The analysis module is configured to analyze measurement data and / or other performance parameters of the entire vessel, such that only comparable operating modes of the vessel are compared with each other, in particular to calculate future energy consumption, the current maximum possible operating range and / or the degree of current or future wear.

[0142] Furthermore, through the analysis of performance and status measurements, which were detected by sensors on a large number of vessel components and stored in the database, as well as through the detection and analysis of usage profiles of individual vessel components (which, for example, specify how often which vessel components, possibly redundant ones, are used in which situations and / or how high the capacity utilization of various vessel components is in different states of readiness and use), both the commissioning and the use phase of various vessel components can be improved. These Petition 870260066452, dated 06 / 07 / 2026, page 80 / 170 50 / 64 recognitions can allow for automatic or manual optimization of the operating modes of individual vessel components, or improve the technical properties of a (new) vessel component. Example 3: Analyses covering vessels

[0143] The detection and storage of a large number of measurement values ​​over longer periods of time (measurement value history) according to the embodiments of the invention already presents significant advantages at the application level.

[0144] Other significant advantages result for systems according to which the historical measurement values ​​of various parameters, detected from various vessels, are analyzed by fleet analysis software. For example, a detection system and analysis module can be developed at least for the rudder system of the vessels, as described for example 1. The rudder systems of the various vessels may, but do not need to, be of the same type (e.g., from the same manufacturer). For even if the rudder systems are slightly different, at least subsystems such as, for example, the individual sensors of the rudder system or the control unit can be of the same type or comparable. Often, several manufacturers of certain vessel components use the same components supplied by one supplier.

[0145] By importing databases containing historical measurement values ​​from various vessels into a central and specially protected database, for example, within the secure infrastructure of a home port, assessments covering the platforms can therefore be carried out. For example, at least a portion of the historical data can be imported into the central database while a vessel is in its home port and deleted from the vessel's database. This increases data security and reduces the memory requirements of the vessel's database.

[0146] Different datasets can be useful in several ways. For example, by analyzing various environmental parameters, such as temperature. Petition 870260066452, dated 06 / 07 / 2026, page 81 / 170 51 / 64 of air and water, current ratios, etc., fleet analysis software can determine whether vessels or vessel components have been operated under comparable conditions, or identify vessels and components that have been operated under comparable conditions, i.e., sufficiently similar conditions. In the next step, the fleet analysis software can then analyze and recognize whether vessel components of a given type or manufacturer are better or worse than functionally identical vessel components of a different type or manufacturer with respect to one or more performance parameters. In this way, a problem that has already occurred in one vessel component may eventually be avoided in another. Furthermore, by covering the vessel, it can be determined how a particular vessel component might be operated better, or should not be operated at all to avoid certain damage.

[0147] Handling recommendations calculated by fleet analysis software can be issued to a user in order to induce them to make improvements to a specific vessel component, as well as components of the same or similar type. According to some embodiments, the individual analysis modules and / or the fleet analysis software can be configured to also calculate and issue tactical recommendations based on data from the database(s).

[0148] Figure 1B shows a system 150 with several military vessels 100, 130, 132. Each of the vessels can be configured as a vessel of the embodiments described herein. Preferably, the vessels all belong to the same or a similar vessel type. However, it is also possible that the vessels belong to different vessel types; in this case, it may also be advantageous to evaluate the sensor data histories for several vessels, for example, if vessels of different types contain some or several components of the same type of vessel, such that a comparison of the measurement values ​​related to the components is convenient, at least for those vessel components.

[0149] In addition, system 150 comprises a computer system 134, which Petition 870260066452, dated 06 / 07 / 2026, page 82 / 170 52 / 64 can be configured, for example, as a single computer or as a group of computers. The computer system comprises an interface 136 for the secure import of the contents of the databases of vessels 100, 130, 132. Depending on the implementation variant, interface 136 can be implemented differently. For example, it may be a wired interface, for example, based on fiber optic technology, which allows for the rapid transmission of large amounts of data. In some cases, however, it may also be a contactless interface, for example, via a radio connection interface, or a USB interface for importing data to a portable drive via USB. In any case, various technical and / or organizational security precautions have been taken to ensure that the data cannot be read or manipulated during transmission.For example, transmission can only occur in an encrypted manner via an end-to-end encrypted data transmission channel. Or authentication of the user initiating data transmission may be required, for example, through biometric and / or password-based authentication methods. For example, computer system 134 and interface 136 for secure data transmission may be part of the IT infrastructure of a home port, which can be used to import and collectively evaluate measurement data automatically generated by vessels during their operations.

[0150] The evaluation of data from various vessels is performed by fleet analysis software 138, which is instantiated on computer system 134. The fleet analysis software analyzes measurement data imported from vessel databases. The imported data can be stored and analyzed, for example, in a central relational database on computer system 134. During the analysis, the fleet analysis software automatically recognizes whether measurement values ​​have been detected from different vessels of vessel components of the same type. This information can be useful to ensure that the correct measurement values ​​are compared. An engine temperature sensor measures the engine temperature, a temperature sensor on the outside of the Petition 870260066452, dated 06 / 07 / 2026, page 83 / 170 53 / 64 The vessel below the water's surface measures the water temperature. During the analysis, it is important to consider which sensor or which vessel component a value of the "temperature" parameter originates from, as a comparison is generally only reasonable if the measurement values ​​originate from sensors and components of the same or similar type; for example, only the temperature values ​​for the "engine" component are compared. Preferably, the manufacturer is also included in the analysis. It may be, for example, that different manufacturers of the same type of vessel component (engine) may place the sensor in slightly different positions, or use different types of sensors. In this case, considering different manufacturers or other relevant circumstances may contribute to generating incorrect analysis results, due to an incorrect interpretation of minor measurement value deviations conditioned by the manufacturer.

[0151] During the analysis, with the aid of imported measurement data, the fleet analysis software recognizes which vessel(s) are optimal or the worst with respect to at least one specific objective criterion. In the case of the objective criterion, this refers to a technical evaluation criterion, such as, for example, the vessel with the best energy level and reserves of wear parts, the vessel with the least accumulated maintenance and / or the longest time until the next inspection is due. Additionally or alternatively, the fleet analysis software recognizes critical states of vessel components in one or more vessels.For example, fleet analysis software can identify all vessels in which vibration parameters indicate that, over the past 6 months, temperature and / or engine revolutions have been measured, for example, due to material fatigue or other unfavorable factors that should be considered dangerous to the vessel's components and / or crew.

[0152] In some embodiments, fleet analysis software is configured to predict the instant when a critical state of a vessel component will occur in one or more vessels. This could be the instant at which Petition 870260066452, dated 06 / 07 / 2026, page 84 / 170 54 / 64 Energy, oxygen, or food supplies are running low, which, due to wear and tear or similar reasons, can lead to the failure of a vital component.

[0153] Furthermore, in some embodiments, fleet analysis software is configured to automatically identify one or more environmental parameters and / or vessel component parameters and their corresponding parameter value ranges that are the cause of a critical state of one of the vessel's components in one or more vessels. This is a particularly advantageous aspect, precisely in the context of highly complex military vessels: sometimes, vessel components and parts exhibit defects long before the end of their expected normal service life, without an unequivocal cause being identifiable. Sometimes it can also be observed that a particular component in a particular vessel fails repeatedly, while the same component in other vessels of the same type lasts significantly longer, and with the same components.Given the highly complex interaction of various components and environmental factors, it is regularly assumed that the cause of a problem is an interaction between the component and its environment. However, the specific cause responsible for the component's failure is not always known. The mechanical loads on components depend on a wide variety of factors, such as the vibration behavior of spatially adjacent components, sea state, wind and current conditions to which the vessel is exposed during its use, and, last but not least, control commands manually entered by the crew. Due to this complexity, it is often not possible to identify concrete causes for component failure through a precise inspection of a given vessel.Only through an analysis of a multitude of measurement values, detected and stored by sensors on countless vessels over a longer period, is it possible to correlate the failure of certain components with the interaction of various other factors, for example, a particular driving style, a particular air temperature, or a specific other factor. Petition 870260066452, dated 06 / 07 / 2026, page 85 / 170 55 / 64 determined salt content, determined current ratios and the use of other specified vessel components and components from other manufacturers. Therefore, fleet diagnostics allows for improved fault diagnosis due to a broader database, including the recognition of faults that are caused in a highly complex, and often non-linear way by the interaction of several specific factors.

[0154] Figure 2 shows a block diagram of a computer system 126, which can be used for the storage and analysis of sensor measurement data. The computer system shown here contains 5 computers 202, 204, 206, 208, which are functionally linked to each other in a group of computers, through a network 280, for example, an intranet, and to which several containers 212 to 230 are instantiated respectively. Each of the computers has one or more processors 240, 242, 244, 246, working memories 248, 250, 252, 254, as well as optionally one or more non-volatile data memories.

[0155] Each container contains at most one instance of an analysis module and is executed there. For example, analysis modules can be implemented respectively as a so-called microservice.

[0156] Some analysis modules are represented in only a single instance. For example, the AM2 analysis module runs only as a single instance 262 within container 214, the AM3 analysis module runs only as a single instance 264 in container 216, and the AM4 analysis module runs only as a single instance 268 in container 222. However, some analysis modules can also be configured in multiple instances within a corresponding number of containers. For example, the AM1 analysis module is instantiated as two instances 260 and 266 in containers 212 or 220.

[0157] The 256 container management software controls how many instances of individual analysis modules are instantiated and / or closed, and on which computer this occurs. The 256 software dynamically orchestrates the instantiation, migration, and closure of containers and the analysis modules contained within them according to Petition 870260066452, dated 06 / 07 / 2026, page 86 / 170 56 / 64 various optimization criteria, which are preferably configurable by a user. The optimization criteria can be, for example, load balancing, upscaling and downscaling criteria that ensure that the computing load is evenly distributed among the computers, some frequently needed analysis modules can be run in parallel on multiple instances, and fast response time and / or high fail-safety are guaranteed.

[0158] The measurement data detected by the sensors of the various components of the vessel, 100, are stored in a database 122. To increase security against database failure, the contents of the database are stored redundantly, distributed across the various computers 202-208. In the state of the art, several methods are known for distributed and redundant data storage, for example, storage by means of error correction methods using error correction bits. In some embodiments, some of the containers 224 to 230 can also be used for storing parts of the database data.

[0159] The automation system 124 also contains one or more processors 282, working memories 284 and an automation software 286. The automation software is configured to dynamically receive measurement data currently detected by at least some of the sensors and process it, possibly together with commands entered by a user, to be used as input, in order to derive one or more control commands from that input and, based on the control commands, automatically control the behavior of one or more components of the vessel 102, 104, 106, 108, 110.

[0160] The computer system 290 with the automation system 124 is connected to the computer cluster 126 via a data communication channel 292. In some embodiments, the automation system can send a request to an access service 288 via the data link 292 in order to read data from the distributed database 122 and use it for calculating control commands. The automation system is operationally decoupled from the analysis modules, i.e., it runs Petition 870260066452, dated 06 / 07 / 2026, page 87 / 170 57 / 64 preferably on a different computer and, if using measurement values ​​stored in the database, accesses the measurement values ​​asynchronously to the analysis modules.

[0161] Figure 3 shows several pairs of asymmetric cryptographic keys specific to the analysis module that can be used for the secure transmission and storage of measurement data.

[0162] For example, the propulsion system 104 may be manufactured by a first manufacturer H1. In addition, manufacturer H1 is also developing an analysis module AM4, which is configured to analyze the measurement values ​​detected by one or more sensors 112 of the drive, in order to automatically predict the current and / or future state of the propulsion system 104. Before or during the development of the analysis module AM4, manufacturer H1 generates a first pair of asymmetric cryptographic keys with a first secret decryption key 344 and a corresponding public encryption key 332. Before delivery of the analysis module AM4 to the operator or manufacturer of the military vessel 100, the secret cryptographic decryption key 344 is integrated into the analysis module AM4 in such a way that it cannot be read by unauthorized third parties.In addition, the 112 rotation number sensor of the 104 propulsion system is equipped with the public coding key 332.

[0163] Public keys, all represented here with thick outlines, can be created specifically for each individual sensor of a vessel component along with their respective corresponding private keys. In other embodiments, however, it is also possible for all sensors of a vessel component to share the same cryptographic key pair or the public key of that pair, and use the public key to encode the measurement data detected respectively by the sensors in each case. A sensor-specific key pair generation has the advantage of very fine-grained control of access rights. A vessel component-specific key pair generation, and the use of the same public key by the sensors of the same vessel component, has the advantage of simplified key management, since in Petition 870260066452, dated 06 / 07 / 2026, page 88 / 170 58 / 64 In general, although not always, the measurement data detected by various sensors on a vessel have identical data or similar requirements for their confidentiality.

[0164] All measurement values ​​that sensor 112 detects and stores in database 122 are encoded with public key 332. This means that all other analysis modules AM1, AM2 and AM3 that were detected by the rotation number sensor 112 cannot decode the data encoded with key 332.

[0165] In one embodiment, however, the rotation number sensor 112 is configured to encode copies of the detected measurement values ​​with a public key 330, which is allocated to an AM3 analysis module from another manufacturer H2, such that this AM3 analysis module can decode the copies with its corresponding private cryptographic key 342. For example, trusted contractual relationships may exist between manufacturer H1 and manufacturer H2 of rudder 108, such that the propulsion system sensor 112 not only encodes the measurement values ​​detected by it with public key 332, but also in copy with public key 330, such that not only analysis module AM4, but also analysis module AM3 can access and decode these measurement values.

[0166] Similarly, the vessel component 110, which contains a temperature sensor 120 and a pressure sensor 118, may be manufactured by a third-party manufacturer H3. Manufacturer H3 further develops analysis modules AM5 and AM6, which may be instantiated in multiple copies in the computer system 126. Modules AM5 and AM6 evaluate both temperature and pressure data respectively, but with respect to different analysis purposes or questions. Sensor 120 generates its measurement data in the form of two measurement data copies, which are encoded with different public keys 324, 322. Sensor 118 also generates its measurement data in the form of two measurement data copies, which are encoded with public keys 324, 322. The data that has been encoded with key 322 may be decoded and processed by any analysis module containing the coordinated private key 334.The data that was encoded with the key 324 can be decoded and processed by... Petition 870260066452, dated 06 / 07 / 2026, page 89 / 170 59 / 64 any analysis module, which contains the coordinated private key 336. Each of the various instances 306 to 312 of analysis module AM5 contains the private key 334. Each of the various instances 314 to 318 of analysis module AM6 contains the private key 336.

[0167] In the example shown, rudder 108 contains three sensors of different types, including angle sensor 114. Each sensor is coordinated with a public key 326 to 330, which forms an asymmetric cryptographic key pair with a corresponding private key 338 to 342. The measurement values ​​detected by the sensors are stored in the database in triple-encoded copies, respectively, with a different public key. Analysis module AM1 can only decode data that has been encoded with public key 326. Analysis module AM2 can only decode data that has been encoded with public key 328. However, analysis module AM3 has two private keys 340, 342 and can therefore decode data that has been encoded with public key 328 or with public key 330.

[0168] This precise control of access rights is particularly advantageous in the area of ​​military vessels, because often only a combination of certain data is critical for security, and not individual data values. For example, GPS position data is always critical for security in every case, as it allows enemy units to initiate an attack on the vessel. The vessel's position below water level (in the case of a submarine) is generally not critical unless other position data is known. The same applies to data such as water temperature or current conditions. However, in some cases, a combination of the vessel's underwater position with current and temperature data allows at least an approximate determination of the vessel's current position.

[0169] The use of different encryption keys for different types of measurement data according to the embodiments of the invention allows for refined control of access to this measurement data. The analysis modules have only one or only a few private keys and, therefore, can only access and Petition 870260066452, dated 06 / 07 / 2026, page 90 / 170 60 / 64 processing of this data that was detected by a sensor that used a public key corresponding to this private key for encoding.

[0170] According to the embodiments, a single particularly reliable software has a copy of all the private keys of the analysis modules. For example, the particularly reliable software could be another analysis module with extended authorization, which was developed by the vessel operator. In addition or alternatively, the fleet analysis software could have a copy of all the private keys of the analysis modules in order to analyze the data from all the sensors of all the vessels in a fleet.

[0171] Figure 3 shows the allocation of private decryption keys for the individual analysis modules and the allocation of public encoding keys for the sensors (or vessel components containing those sensors). The sensors collect measurement data and encode it with the public keys allocated to them.

[0172] According to embodiments of the invention, other pairs of asymmetric cryptographic keys are allocated to the sensors and analysis modules, but for signature verification purposes (not shown here). In this case, private signature keys are allocated to individual sensors or to the vessel components containing these sensors. The sensors or vessel components use the signature keys to sign the detected and optionally encoded measurement data. Individual analysis modules have access to public signature verification keys, which respectively form a pair of asymmetric cryptographic keys with one of the signature keys. For example, the public signature verification keys may be a component of individual analysis modules.The analysis modules are configured to verify the validity of measurement data signatures using signature verification keys, and only then process the measurement data if its signature is valid.

[0173] Figure 4 shows, by way of example, some components of a military vessel with several analysis modules (“AMs”) and a database 122. In this case, the database 122 is implemented in the form of two different databases, which respectively contain different parts of the data. The database of Petition 870260066452, dated 06 / 07 / 2026, page 91 / 170 Data 122.1 contains measurement data with a normal level of security, which exist wholly or partially in unencoded form. In contrast, database 122.2 contains sensitive measurement data, also referred to as “red data” in the military field, and which are preferably encoded with one or more different cryptographic keys, for example, according to an encoding method described with respect to Figure 3. Box 406 represents a large number of different measurement values ​​from different sensors of various vessel components.For example, measurement values ​​may come from the following vessel components and subsystems: various internal measurement data (e.g., measurement values ​​related to the condition of various vessel components), SBM (measurement data related to damage, e.g., regarding damage after breakdowns and / or combat operations), EBM (measurement data related to energy, e.g., condition data of a diesel engine), ONA (self-noise analysis), and vibration data. Vibration data are particularly important for assessing current and future system conditions, as this data in most cases allows the identification of mechanical operating problems in rotating machinery, especially aging processes in steel structures.

[0174] The output interface 404 can be, for example, a screen or a speaker, or a machine-to-machine interface. For example, the interface can be a GUI that displays the result of the analysis of the individual analysis modules to the user 424, in order to enable the user to take appropriate action.

[0175] For example, analysis module 410 can generate an analysis result indicating that energy reserves will be depleted in three days with constant consumption. The result is displayed to the user on the screen so that they can take appropriate measures, such as reaching a port in a timely manner or reducing energy consumption. Analysis module 112 can predict the likely operating range of energy reserves for the coming days by analyzing various measurement values ​​such as currently available energy reserves, current ratios, wind ratios in combination with Petition 870260066452, dated 06 / 07 / 2026, p. 92 / 170 62 / 64 user-specified data, such as the selected route. If the calculation shows that energy reserves are insufficient for the currently selected route, and that reserves would be sufficient with the selection of a possible alternative route, the module can suggest the alternative route, such that the user only has to confirm the alternative route, causing the vessel's automation system to automatically direct the vessel to the alternative route. Some analysis modules can also output their analysis results directly to individual vessel components. For example, in the event of a power emergency on the vessel, module 410 can automatically shut down all vessel energy consumers that are not considered essential for the vessel's operation, or terminate the power supply to those energy consumers.

[0176] At least some of the vessel's components may have a 402 interface, to transmit detected measurement data directly to one or more of the 410 to 422 analysis modules. This may be particularly the case with respect to measurement data, which are important for rapid reactions of individual analysis modules in real time, since this way delays caused by recording measurement data in a database can be avoided; measurement data may also be recorded in the database in the background or asynchronously.

[0177] The analysis modules shown here are grouped according to their fields of application, for example, into modules of the EES power generation system, the maintenance system or the “service” system. The service system comprises several services, for example, related to the detection and / or communication of various faults in vessel components.

[0178] According to some embodiments, various external systems have access to the analysis modules and their results, for example, through an external interface 408. The 408 interface can be used, for example, to export data from the database 122 at the port of origin, so that fleet analysis software can evaluate the exported data. Petition 870260066452, dated 06 / 07 / 2026, page 93 / 170 63 / 64 List of reference numbers 100 military vessels 102 weapon system 104 propulsion system 106 navigation system 108 rudder system 110 components of the vessel 112 rotation speed sensor 114 GPS sensor 116 angular position sensor 118 pressure sensor 120 temperature sensor 122 database 124 automation system 126 distributed computer system 130 military vessel 132 military vessel 134 computer system 136 import interface 138 fleet analytics software 140 screen 202-208 computer system 212-230 container 260,266 instances of the analysis module 260-268 instances of the AM1 analysis module 270-278 parts of the database data 240-246 CPUs 248-254 working memory 256 container management software 280 network connection (intranet) Petition 870260066452, dated 06 / 07 / 2026, page 94 / 170 64 / 64 282 CPU 284 working memory 286 automation software 288 database access service 290 computer system 292 data link 302-304 instances of the AM2 analysis module 306-312 instances of the AM5 analysis module 314-318 instances of the AM6 analysis module 322-332 public encryption key for secure data exchange with certain analysis modules. 334-344 private decryption key specific to certain analysis modules. 402 input data interface 404 output data interface 406 measurement values 408 external data interface Petition 870260066452, dated 06 / 07 / 2026, page 95 / 170

Claims

1 / 9 CLAIMS 1. A military vessel (100) containing: - several vessel components (104-110) which respectively contain one or more sensors (112-120), wherein at least some of the vessel components belong to a weapon system (102), a drive unit (104) and a navigation system (106), wherein the sensors are configured for the detection of measurement values, wherein the measurement values ​​indicate operating states of the vessel components containing the sensor that detects the measurement values, and states of the vessel or its environment; - a database (122), wherein the database stores a history of measurement values ​​from the sensors in a persistent and protected manner in connection with a date stamp;- an electronic automation system (124), wherein the automation system is configured for the automatic and / or semi-automatic control of at least one of the vessel's components in real time, based on measurement values ​​and / or based on user input, which occurs in response to an emission of measurement values ​​through a user interface; characterized by containing: - a plurality of analysis modules (260-280) that are configured respectively to perform an analysis of at least a part of the measurement values ​​stored in the database (122), wherein the various analysis modules are executed in several different containers (212-230) and, in this way, in isolation from each other.; 2. Military vessel, according to claim 1, characterized by comprising: - several computers (202-208) networked together to form a computer cluster (126), which work together in a network as hosts, such that at least one instance of the database is prepared; and - container management instructions, wherein the container management instructions are configured for the automated preparation, escalation and management of several containers (212-230) on the various computers, in such a way that the computers serve respectively as host systems for one or more containers, wherein the containers are isolated from each other.

3. Military vessel, according to any of the preceding claims, characterized in that - the automation system (124), on the one hand, and one or more analysis modules (260-268), on the other hand, being operationally decoupled; and / or - both the automation system and the one or more analysis modules being configured to perform their respective control or analysis functions without the use of an internet connection.

4. Military vessel according to claim 3, characterized in that the operational decoupling is carried out by: - ​​asynchronous working form of automation system, on the one hand, and one or more analysis modules (260-268), on the other hand; and / or - asynchronous register or read access to the database (122) by means of the automation system or by means of a service (288) operationally linked with the automation system, on the one hand, and by means of one or more analysis modules (260-268), on the other hand; and / or - instantiating the automation system, on the one hand, and one or more analysis modules (260-268), on the other hand, for different computers (202-208; 290).

5. Military vessel, according to any of the preceding claims, characterized in that, in each of the containers (212-230), there is executed, at most, one instance of, at most, one analysis module (260-268).

6. Military vessel according to any of the preceding claims, characterized in that the container management instructions (256) are configured to orchestrate the production of containers (212-230) and instantiate and terminate analysis modules (260-268), such that: Petition 870260066452, dated 06 / 07 / 2026, page 14 / 170 3 / 9 - in the event of failure or inaccessibility of one of the computers (202-208), the containers and analysis modules are automatically started on one of the other computers, which due to the failure or inaccessibility of one of the computers are no longer available or accessible; and / or - in the event of exceeding a maximum number of instances currently running on the computers, automatically terminate one of these instances and / or delete one of the containers that contains an instance of this analysis module;and / or - in the event that a predefined maximum computer load is exceeded on one of the computers, automatically migrate at least one container hosted on that computer, along with the instance of the current analysis module on it, to another computer; and / or - in the event that a predefined minimum computer load is not reached on one of the computers, automatically migrate at least one container hosted on another computer, along with the instance of the current analysis module on it, to that computer; and / or - in the event that a predefined maximum computer load is exceeded on one of the computers, automatically identify at least one container hosted on that computer, along with the instance of the current analysis module on it, and instantiate a copy of that identified container, along with the current analysis module on it, to at least one other computer;and run parallel analyses including, at least, the instance of the analysis module in the identified container and the other instance of the instantiated analysis module; and / or - if a predefined minimum computer load is not reached on one of the computers, automatically identify at least one container hosted on another computer along with the current instance of the analysis module on the same computer, instantiate a copy of that identified container along with the current analysis module on that computer; and run parallel analyses including, at least, the instance of the analysis module in the identified container and the other instance of the instantiated analysis module.

7. Military vessel, according to any of the previous claims, Petition 870260066452, dated 06 / 07 / 2026, page 15 / 170 4 / 9 characterized by at least some of the analysis modules, respectively, having a portion of the database data specifically allocated to them, with the data portions being stored in a protected manner, such that only the analysis module allocated to that portion of the data can access that data by reading and / or writing.

8. Military vessel, according to any of the preceding claims, characterized in that several (260, 262, 264; 306, 314) of the analysis modules (260-268) are specifically allocated to, respectively, one (108; 110) of the vessel's components, and are configured to analyze at least the measurement values, which are detected by one or more sensors of that vessel component to which they are allocated, receive, directly or indirectly, from the database, and output the result of the analysis.

9. A military vessel, according to claim 8, characterized by at least one of several analysis modules, which is allocated to one of the vessel's components, being configured to perform an analysis that includes: - a recognition of current or future critical states of a vessel component; and / or - a prediction of the time of entry of a critical state of a vessel component; and / or - the automatic identification of one or more environmental parameters and / or vessel component parameters that are originally for a critical state of a vessel component; and / or - a calculation of a handling recommendation to a person in relation to a vessel component; and / or - a calculation of a control command to a vessel component for the automatic execution of the control command.

10. Military vessel, according to any of the preceding claims, characterized by: - ​​the sensors of at least one of the vessel's components containing at least one cryptographic encoding key (324, 322, 330, 328, 326, 322), Petition 870260066452, dated 06 / 07 / 2026, page 16 / 170 5 / 9; - one of the analysis modules being coordinated to at least one component of the vessel and containing a decoding key (334, 336, 338, 340, 342, 344) corresponding to that cryptographic encoding key; - the sensors of at least one component of the vessel being configured to store, in encoded form, at least some of the measurement values ​​detected by it in the database and / or transmit directly to the analysis module of at least one component of the vessel; - at least one analysis module must be configured to decode at least some measurement values ​​with the decoding key and analyze the decoded data.

11. A military vessel, according to any one of claims 3 to 12, characterized in that: - the sensors of at least one of the vessel's components contain a signature key; - one of the analysis modules of at least one of the vessel's components is allocated and contains a signature verification key corresponding to that signature key; - the sensors of at least one of the vessel's components are configured to sign at least some of the measurement values ​​detected by them with the signature key and store them in signed form in the database and / or transmit them directly to the analysis module of at least one of the vessel's components; - at least one analysis module is configured to test at least some of the measurement values ​​with the signature verification key, and only analyze the signed data when the signature verification results in the signature being valid.

12. Military vessel, according to any of the preceding claims, characterized in that at least one of the analysis modules is configured to perform an analysis (e.g., correlation analysis, NN-based prediction, rule-based prediction, etc.) on the measurement values ​​of various sensors. Petition 870260066452, dated 06 / 07 / 2026, p.17 / 170 6 / 9 different from various different vessel components, where the analysis includes: - recognition of current or future critical states of a vessel component; and / or - prediction of the time of entry of a critical state of a vessel component; and / or - automatic identification of one or more environmental parameters and / or vessel component parameters that are originally for a critical state of one of the vessel components; and / or - calculation of a handling recommendation to a person; and / or - calculation of a control command to one of the vessel components for automatic execution of the control command.

13. A military vessel according to any of the preceding claims, characterized in that: - one of the vessel's components contains a rudder system with a control unit, one or more rudders on the starboard and port sides, the control unit being configured to coordinate, in particular, synchronize the position and movement of the rudders on the starboard and port sides by sending control commands, on the one hand, to the rudders on the starboard side and, on the other hand, to the rudders on the port side; - the rudder system contains several sensors, which are configured for the detection of rudder system parameter values, the rudder system parameters comprising two or more of the following measurement parameter values: current rudder position, rudder oscillations, rudder barnacle, oscillations of the rudder system components, rudder system circuit states;- one or more of the vessel's components contain several sensors, which are configured for the detection of environmental parameter values, wherein the environmental parameters comprise two or more of the following measurement parameter values: water depth, sea state, ship speed; - one of the analysis modules is an analysis module for the improved control of the rudder system and is configured to analyze the rudder system parameter values, the environmental parameter values, as well as the time periods between the issuance of control commands from the control unit to the respective rudder until the conversion of the control commands, in order to recognize correlations between the time periods, the rudder system parameter values ​​and the environmental parameter values, and / or in order to improve the coordination of the rudder system rudders.

14. A military vessel, according to any of the preceding claims, characterized by: - ​​one of the vessel's components containing at least one sensor for detecting oscillations, in particular, vibrations of that vessel component, wherein that vessel component is, in particular, a rudder system and / or the drive unit; - one of the analysis modules being configured to analyze the oscillations of that vessel component in order to calculate the current and / or future state of another vessel component, wherein that other vessel component is, in particular, a rudder system; and / or - one of the analysis modules being configured to analyze the oscillations of that vessel component in order to improve the control of other vessel components, wherein that other vessel component is, in particular, a rudder system.

15. Military vessel, according to claim 2 or any of claims 1 to 14, when referring to claim 2, characterized in that the database data is stored and distributed in several containers on several computers, wherein the container management instructions are configured to orchestrate the production of containers and the storage, replication and deletion of data in the containers, such that: - in normal operation, the database data is stored redundantly distributed across the various computers in such a way that, in the event of failure of one or more of the computers, they can be reconstructed from the data stored on the remaining computers;and / or - in the event of a computer failure, another computer is automatically identified, in which a copy of those parts of the data that were stored on the failed computer and the data contained in that other computer are prepared for the analysis modules and the automation system; and / or - in the event of a computer failure, a redistribution of at least a portion of the redundantly stored data distributed across multiple containers is automatically performed, in such a way that the degree of redundancy of the database data is restored; and / or - in the event of exceeding a predefined maximum demand on one of the computers, at least a portion of the database data stored on that computer is automatically migrated or copied to another computer;and / or - if a predefined minimum computer load is not reached on one of the computers, automatically delete at least one of the containers hosted on that computer.

16. System (150) characterized by comprising: - at least two military vessels (100, 130, 132), as defined in any of the preceding claims; - a computer system (134) with: o an interface (136) for the secure import of the contents of the databases of the at least two vessels; o fleet analysis instructions (138), wherein the fleet analysis instructions are configured to analyze the measurement values ​​of the databases of the at least two vessels, wherein the fleet analysis instructions are configured to automatically recognize if measurement values ​​of different vessels of vessel components of the same type have been detected, wherein the analysis comprises: Petition 870260066452, dated 06 / 07 / 2026, p.20 / 170 9 / 9 • recognition of those vessels whose entirety of vessel components is in the best or worst condition with respect to at least one technical evaluation criterion; and / or • recognition of the critical condition of a vessel component in one or more vessels; and / or • a prediction of the time of onset of a critical condition of a vessel component in one or more vessels; and / or • automatic identification of one or more environmental parameters and / or parameters of vessel components that are originally associated with a critical condition of one of the vessel components in one or more vessels. Petition 870260066452, dated 06 / 07 / 2026, p. 21 / 170.

Images