Method and device, in particular for the preliminary verification of a status update to be carried out

Abstract

The invention relates to a device and a method in which a first data set containing first device information relating to the current status of an automation device of an automation system and a second data set containing second device information relating to a status update to be carried out on the automation device are received in advance of this status update and checked as to whether the status after the status update to be carried out is compatible with the current status, wherein artificial intelligence is used and trained and / or instructed during operation to use the first data set and the second data set as an input data set and to analyse the first device information and second device information contained therein for compatible device information; a compatibility result is generated on the basis of the analysis and, on the basis thereof, it is determined whether the status updated in the event of the status update and the current status jointly fulfill compatibility criteria; and if a compatibility criterion is not jointly fulfilled, a third data record representing same is output.

Description

[0001] Method and device, in particular for the preliminary verification of a state update to be carried out

[0002] Description

[0003] The invention relates to a method and a device, in particular for the preliminary verification of a state update to be carried out on an automation device of an automation system.

[0004] As is well known, updating automation devices in an automation system, hereinafter also referred to as industrial automation devices, which are conventionally connected to an OT network, especially the firmware on these devices, is often still only possible locally and individually for each device. Therefore, different tools are used for many devices, and new developments for individual devices have already begun.

[0005] For managing industrial automation devices, there are so-called "device management tools," such as the "eVue" tool from Etherwan for device-specific network configuration and monitoring, the "PerleView" software from Perle for their network components, or the "Mobile Device Management" from Phoenix Contact Cyber ​​Security GmbH to update their "MGuard" devices for remote maintenance and monitoring via mobile networks.

[0006] Requirements concerning the closing of security gaps or the expansion of functions have long been known for computers in IT infrastructure or mobile devices. For automation devices such as PLCs (programmable logic controllers) or network components in a plant, these requirements have only recently become relevant. However, as IT and OT converge—that is, Information Technology (IT), which describes / concerns electronic data processing, and Operational Technology (OT), which concerns the hardware and software infrastructure for the direct monitoring and / or control of industrial plants, devices, processes, and events—the need for device and update management becomes increasingly apparent in the automation market.To differentiate between IT and OT, the internationally standardized ISA95 model is used within the scope of this invention, which divides automation into five levels. The top two levels comprise the overarching enterprise level and the operations management level. The digital processes at these levels are assigned to IT and take place in appropriately configured IT networks. The control of automation processes at the lower three levels—i.e., the process control level, the control level, and the field level—is, however, carried out via appropriately configured OT networks. Therefore, a link is fundamentally required for a connection, including data exchange, between the two networks.

[0007] For example, WO 2023 / 180442 A1 of the applicant discloses a management and update system for automation devices of an automation system connected to an OT network, in which the management and update system, hereinafter also referred to as DaUM (“Device and Update Management”) system, comprises a device management and update user interface that is connected to an OT network, to which a plurality of automation devices of an automation system are also connected. The device management and update user interface is programmed to provide:

[0008] - an interface selection and connection service, set up to select and configure a communication interface to establish a communication link to an automation device of the majority of connected automation devices;

[0009] - a readout service, set up to activate a readout from each automation device to which the communication link is established, of device type information stored in the automation device, and to store the device type information read out in each case;

[0010] - an update scheduling service, set up to schedule update requests for each automation device of the plurality of automation devices, for which read device type information is stored;

[0011] - an update file retrieval service, set up to establish a communication link to at least one storage device and to retrieve update files stored in the storage device;

[0012] - a testing and allocation service, set up to check each retrieved update file for its release with respect to the majority of automation devices in functional dependency on the stored device type information, and if the testing of one of the retrieved update files results in a release for an automation device, to allocate this update file to the device type information stored for that automation device; and

[0013] - an update service, set up to transmit, according to stored device type information, to each automation device the update file assigned to that automation device, including an update command, in each case in functional dependency on the update requirements planned for each automation device.

[0014] The solution presented in WO 2023 / 180442 A1 not only enables cross-component updates, but also provides comprehensive security at all levels of an automation system.

[0015] In this context, it should be noted that the concept of safety is generally subdivided into the terms safety, security, and privacy, each addressing a different aspect of safety. It should be expressly pointed out here that, within the context of this invention, which is situated in the field of automation technology, the term "safety," when used in the following description and / or claims and unless otherwise stated, refers to the concept described by the term "safety" and not to the concepts described by the terms "security" and "privacy." Although safety, security, and privacy are often used interchangeably or equated, they differ fundamentally in their meaning with regard to definition and context, as well as potential threats, risks, attack scenarios, and avoidance and defense strategies.

[0016] While "security" refers to the protection of software / systems against corruption / damage / manipulation / attacks on the confidentiality, integrity, and availability of information used / managed by the software / system, and "privacy" refers to the protection of data so that it does not fall into the hands of unauthorized persons, in the context of this invention, which is situated in the field of automation technology, the term "security," when used below in the description and / or claims and unless otherwise stated, is to be understood as the concept described by the term "safety," which thus defines the protection against a malfunction of software / systems during intended use.

[0017] If errors, including incompatibilities of dependent components, especially software and hardware, occur within the context of operational automation equipment in an automation system, particularly for automation equipment connected to an OT network, these can consequently lead to malfunctions of the system and ultimately to a security-related event, even during normal use.

[0018] In this context, EP20191731 B1 describes, for example, a system and a method for the industrial automation of fault finding, in which a running plant is observed and analyzed with the help of artificial intelligence and possible fault conditions are displayed to the user or solutions are offered.

[0019] US 2021 / 0263792 AI or US11099928B1 describes a processing device configured to retrieve information about a specific component to be repaired, to generate a recommended repair action to be performed on the specific component, and to provide the recommended repair action and the retrieved information about the specific component as input to an encoder of a machine learning model that implements an attention mechanism.Furthermore, the processing device is configured to receive a success prediction for the recommended corrective action from a decoder of the machine learning model and then determines whether the predicted success of the recommended corrective action meets certain criteria, as well as executing the recommended corrective action if the predicted success meets the certain criteria, and changing the recommended corrective action if the predicted success does not meet the certain criteria.

[0020] The aforementioned state of the art, as well as other state-of-the-art solutions, therefore employs artificial intelligence and / or machine learning to analyze existing states and to learn how these can be improved through predictions, i.e., how errors can be corrected. Consequently, based on already installed components, especially software, which may potentially damage the system or cause it to malfunction under certain conditions, artificial intelligence and / or machine learning are used to identify possible updates, particularly those that lead to an improved state.

[0021] The object of the invention is now to demonstrate a way in which, within the framework of updates for an automation device of an automation system, in particular for an automation device connected to an OT network, incompatibilities of dependent components, in particular software and / or hardware, can be detected, especially in advance of updates to be carried out.

[0022] Solutions according to the invention are represented by a respective object having the features of one of the independent claims. Preferred embodiments of the invention are the subject of the respective dependent claims.

[0023] Accordingly, the invention proposes a method, in particular for the pre-verification of a state update to be performed on an automation device of an automation system, according to which a first data set with first device information concerning the current state of an automation device of an automation system is received, and a second data set with second device information concerning a state update to be performed on the automation device is received in advance of this state update; and subsequently, it is checked whether the state after the state update to be performed is compatible with the current state, wherein artificial intelligence is used for this purpose and is trained on compatible device information based on a large number of different device information and / or learned during operation.to use the first data set containing the first device information and the second data set containing the second device information as input data sets and to analyze the first and second device information contained therein for compatible device information, whereby a compatibility result is generated based on the analysis and, based on the compatibility result, it is determined whether the state updated according to the second device information in the case of a state update and the current state according to the first device information jointly satisfy one or more compatibility criteria and, in response to the determination that the updated state and the current state do not jointly satisfy at least one compatibility criterion, a third data set is output which represents at least the one compatibility criterion that is not jointly satisfied.

[0024] Accordingly, the invention further provides, in particular for carrying out this method, a device, especially for the preliminary verification of a state update to be carried out of an automation device of an automation system, which comprises at least one data processing device, which includes a memory and an artificial intelligence as well as a processor connected thereto; wherein the at least one data processing device is configured to perform the following steps:

[0025] Receiving an initial data set with initial device information concerning the current state of an automation device in an automation system;

[0026] Receiving a second data set with second device information concerning a state update to be performed on the automation device in advance of this state update;

[0027] Checking whether the state after the state update to be performed is compatible with the current state, whereby artificial intelligence, hereinafter also referred to as AI, is used for this purpose and is trained on compatible device information using a large number of different device information and / or taught during operation, using the first data set with the first device information and the second data set with the second device information as input data sets and analyzing the first device information and second device information contained therein for compatible device information,

[0028] Generate, based on the analysis, a compatibility result and;

[0029] Determine, based on the compatibility result, whether the state updated according to the second device information in the case of a state update and the current state according to the first device information jointly satisfy one or more compatibility criteria; and, in response to determining that the updated state and the current state do not jointly satisfy at least one compatibility criterion of the one or more compatibility criteria, output a third data set that represents at least the one compatibility criterion that is not jointly satisfied.The invention further provides for the provision of a computer program comprising program code means for carrying out the aforementioned method, as well as a computer program product with a non-volatile, processor-readable storage medium comprising instructions which, when executed by a processor of a data processing device, can cause it to execute the aforementioned method steps, and a data carrier with program code stored thereon, which is designed such that a data processing device connectable to an OT network, when programmed with the program code, provides a correspondingly configured data processing device.

[0030] The main advantages of the invention over the prior art described above can therefore be seen in the fact that, with an object according to the solution of the invention, it is possible to determine in advance, within the framework of an update process, for example also when used within an administration and update system according to WO 2023 / 180442 A1, whether an update, in particular an update encompassing a complete update, will be successful. In this context, it is expediently considered not only components provided by the device manufacturer, in particular software components, but also, expediently, hardware components, but also components added by the user, in particular software components, but also, expediently, hardware components.In the preferred implementation, a comprehensive image of the installed and used components, as well as the components to be installed and used after a planned update, can be generated and analyzed using artificial intelligence.

[0031] Consequently, the current state (software and / or hardware) of an automation device within an automation system, particularly within the automation system itself, is detected and compared beforehand with the state after a planned update (of software and / or hardware). Artificial intelligence is used to determine whether the update is possible without problems, or whether and where incompatibilities might arise, thus enabling the user to explicitly resolve these incompatibilities in advance.

[0032] The features and advantages of the invention already outlined above, as well as further features and advantages, will become more apparent in the following description with reference to examples of preferred embodiments and further developments, with reference to the accompanying drawing, which shows:

[0033] Fig. 1, in the form of a schematic diagram, shows an overview of a device, particularly for carrying out a method according to the invention, especially for the preliminary verification of a state update to be carried out of an automation device of an automation system, with a data processing device configured according to the invention, and

[0034] Fig. 2 shows an overview of a device management and update user facility integrated into an exemplary management and update system for automation devices connected to an OT network of an automation system.

[0035] Reference is made below to Fig. 1, which, in the form of a schematic diagram, shows an overview of a device, in particular for carrying out a method according to the invention, especially for the preliminary verification of a state update to be carried out on an automation device of an automation system, with a data processing device configured according to the invention, and with reference to which examples of preferred designs and further developments of a verification to be carried out on an automation device according to the invention in advance of a state update are described in more detail below.

[0036] In particular, Fig. 1 shows an exemplary embodiment of the invention for an automation device 200 of an automation system connected to a network, especially an OT network, which, however, is not shown in detail for the sake of clarity. The automation system can, of course, include further automation devices, which are likewise not shown for the sake of clarity. The following description, carried out using the example of one automation device, i.e., in particular the automation device 200, also applies accordingly to other automation devices of the automation system.

[0037] A device 10, not shown in detail in Fig. 1 for the sake of clarity, comprises or integrates, in particular, at least one data processing device 11, which includes a memory 12 and an artificial intelligence 14, as well as a processor 16 connected to these. In the exemplary embodiment, the device 10 is also expediently connected to the network to which the automation device 200 is also connected and configured, in order to exchange data, in particular, via the network. In a supplementary and / or alternative embodiment, however, at least one other wired and / or wireless communication path can also be provided for data exchange within the scope of the invention.

[0038] The at least one data processing device 11 is configured, in particular programmed, such that it can perform the following steps within the scope of the invention. These steps are performed, in particular, for the preliminary verification of a state update of an automation device in an automation system, e.g., the automation device 200 sketched in Fig. 1. The execution is expediently carried out automatically as part of an update of an automation device, especially if the device is additionally integrated into or connected to a management and update system. Such a management and update system could, for example, be one shown in Fig.Figure 2 does not show the management and update system 100 of WO 2023 / 180442 A1 in detail, also referred to therein as the DallM system (“Device and Update Management System”), which, as is known, includes or integrates in particular a device management and update user interface 110 connected to an OT network. A number of automation devices 200a-200d of the automation system are also connected to and thus installed on this network, which is why the automation devices 200a-200d are also referred to as installed devices in Figure 2. The disclosure of WO 2023 / 180442 A1 is therefore incorporated in its entirety and included in the content of the present application.

[0039] As described in detail in WO 2023 / 180442 A1, the device management and update user facility 110 disclosed therein is programmed to provide various services, the services of the management and update system being collectively referred to as DaUM Service (“Device and Update Management Service”) and, as part of the management and update process, ensuring in particular dynamic asset and function monitoring of the automation devices installed on the OT network.

[0040] However, the execution of the pre-verification of a status update to be carried out can also be initiated individually during an update of an automation device, in particular manually, e.g. by a user of the automation device, in addition and / or alternatively, even if the device is additionally integrated into or connected to such a management and update system.

[0041] Within the scope of the present invention, at least one first data record 16, 16' containing initial device information concerning the current state of the automation device 200 is received by the data processing device 11 and / or expediently stored in the memory 12. Depending on the communication path provided, the data record 16, 16' can be read directly from the automation device 200, transmitted from it to the data processing device 11, and / or transferred to the data processing device 11 from an external source, e.g., also entered. Although this step can, in principle, be executed independently of a state update of the automation device 200, the data processing device 11 is configured such that, in practical implementation, this step must be executed prior to such a state update.If the first data record 16, 16', containing the first device information, is stored in the memory, especially if it has already been stored in advance, it must therefore be read out of it again before its further use for the execution of the pre-verification by the data processing device 11, so that the execution of receiving the first data record 16, 16' can also include the step of previously reading the first data record from the memory.

[0042] Furthermore, prior to such a state update of the automation device 200, at least a second data record 17 containing second device information relating to the state update to be performed on the automation device 200 is received by the data processing device 11 and appropriately stored in the memory 12. This second data record 17 is generally transferred to the data processing device 11 from an external source, e.g., by input and / or read from an external storage device 20 by the data processing device 11.

[0043] Such a storage device 20 can therefore be, in particular, a storage device as described in WO 2023 / 180442 A1, i.e., in particular a storage device of the manufacturer, but can also, in principle, include any type of storage device, such as a USB stick or storage space accessible via the Internet. In particular, the storage device 20 can thus essentially also represent a central update repository as a source with respect to the files provided and intended for updating, which is referred to as "Cure" ("Central Update Repository") in WO 2023 / 180442 A1 and consequently also in Fig. 2. If the data processing device 11 has access to both the first data record 16, 16', i.e., in particular the at least one first data record 16, 16', and also the second data record 17, i.e., in particular the at least one second data record 17,Before or after these data sets are made available to the data processing device 11, the device is configured to perform a check to determine whether the state after the state update to be performed is compatible with the current state. For this purpose, the artificial intelligence 14 is used and trained on a variety of different device information to identify compatible device information and / or is trained during operation to use the first data set 16, 16' containing the first device information and the second data set 17 containing the second device information as input data sets. The first and second device information contained therein are analyzed for compatible device information, and based on this analysis, a compatibility result is subsequently generated, which is used to determine whetherwhether the state updated in the case of a state update according to the second device information and the current state according to the first device information jointly fulfill one or more compatibility criteria, which is represented in particular by means of the functional block marked with reference numeral 18 in Fig. 1.

[0044] The artificial intelligence is thus used within the scope of the invention to analyze states after a state update is to be performed and for compatibility with current states, or in particular to learn, based on the device information, to make predictions as to whether a state can be established or found on the automation device 200 after an update is to be performed, in particular due to newly installed or updated components that collide with previously installed, i.e. currently installed, and still to be used components, damaging the automation device 200 and / or the automation system and / or leading to an error.In response to the determination that the updated state and the current state do not jointly satisfy at least one compatibility criterion of one or more compatibility criteria, a third data record 19, i.e., at least one third data record 19, is finally output by the data processing device 11, i.e., in particular by the KL integrated therein, in particular also displayed to a user, e.g., optically or visually, e.g., on a screen and / or by means of a light signal, and / or acoustically, e.g., by means of a sound and / or speech output, or transferred to another data processing device connected to or connectable to the device, which represents at least the one compatibility criterion that is not jointly satisfied.

[0045] Consequently, the invention, through the use of artificial intelligence, enables a further effective improvement in the protection against malfunctions in automation devices of an automation system by detecting potentially harmful updates to the automation devices before these updates are actually implemented. With the device or method according to the invention, it is thus ensured in advance that the automation device, and in particular the automation system as a whole, continues to function even after an update, i.e., it is protected against subsequent malfunctions during intended use. Furthermore, in the event of detected incompatibilities, intervention is possible in advance, and in particular, a user can intervene to prevent malfunctions.

[0046] In particular, if, according to the preferred embodiment, a Large Language Model, e.g., GPT-4 or BERT, is used for the artificial intelligence and is trained on compatible device information using a variety of different device information and / or learned during operation, the first device information concerning the current state of the automation device 200 contained in the first data set 16, 16', and the second device information concerning the state update to be performed on the automation device 200 contained in the second data set 17, are accessed in a simple manner, especially by reference to description files for the respective specific automation device 200, in particular for an asset currently included and / or to be installed by it. The term "asset" here generally refers to any type of hardware (e.g., servers and switches) and software (e.g.,Firmware, applications, configurations and supporting systems) of an automation environment that supports activities in the context of an automation plant with automation devices connected to a network, especially an OT network.

[0047] For the first and second device information, description files can preferably be used, or the first and second device information preferably includes description files as already described, for example, in WO 2023 / 180442 A1. These should therefore contain at least information, in particular information provided by the device manufacturer and / or added by the user, regarding already installed or to-be-installed file types, update files, manufacturer information, version information, type information, dependencies on existing previous versions and / or hardware versions, a unique ID (identification code), checksums, release status, and / or other accompanying documents, such as license information, change notes, and release notes. Optionally, further information can, of course, be provided, such as...the duration of a typical update and / or refresh process.

[0048] In a supplementary or alternative embodiment, the plaintiff further uses a chatbot for the analysis of the first and second device information, respectively, based on compatible device information, in particular the comprehensive image of the installed and used components, as well as the components to be installed and used after a planned update, thus formed in a preferred implementation. This chatbot is also programmed to analyze its own environment and act with a specific degree of autonomy, and is trained and / or learned during operation to draw conclusions from the ongoing dialogues, which are represented in particular by the speech bubble marked with reference numeral 18' in Fig. 1, with regard to the multitude of different device information and thus to continuously develop its database.

[0049] The data processing device 11 is furthermore expediently equipped with a transmitting and receiving device and configured to enable the artificial intelligence to access at least one database for analysis via the transmitting and receiving device, and in particular further configured to establish an internet connection for accessing the at least one database. This allows, in principle, essentially any database to be made available to the plaintiff for analysis as an additional data source and / or as a storage space of essentially any type, e.g., also located on the World Wide Web, or to be used by the plaintiff for analysis, in particular for a central update memory with regard to the files / device information provided and intended for updating, and especially also to continuously develop its own database.

[0050] Depending on the configuration and setup of the data processing device 11 and using a chatbot as mentioned above, the device can also expediently communicate directly with a user, i.e., particularly optically or visually, e.g., via the screen mentioned above, and / or acoustically, e.g., via the speech output mentioned above. For this purpose, a suitable input device should be connected for the user. If the inventive subject matter is integrated into an administration and update system 100, as mentioned above, such as the system described in detail in WO 2023 / 180442 A1 of the applicant, such communication can then also take place, for example, via the device administration and update user interface 110 integrated therein.

[0051] In particular, if the first data record 16, 16', comprising the first device information, is stored in memory 12 or another memory to which the data processing device 11 has access, it is also expedient to configure the system to update the first data record based on the second device information after the state update has been carried out, i.e., expediently only if it has been determined by means of the computer that an update is possible without problems.

[0052] For carrying out the method according to the invention and / or for configuring the processing device 11 suitably configured for carrying out this method according to the device according to the invention, it is preferably provided, and known to those skilled in the art per se, in particular to use a computer program with program code means for carrying out the aforementioned method, to use a computer program product with a non-volatile, processor-readable storage medium comprising instructions which, when executed by a processor of a data processing device, can cause it to execute corresponding process steps, and / or to use a data carrier with program code stored thereon, which is configured such that a data processing device connectable to an OT network, when programmed with the program code,provides a suitably configured data processing device.

[0053] Taking into account and appropriately evaluating the above description, it can be summarized that the invention provides a solution by which, with the aid of artificial intelligence, potential future incompatibilities can be detected even before the rollout or implementation of an update to an automation device, i.e., in particular, before a phased introduction, replacement, and / or update of technologies such as hardware, software, and / or other components / assets. Version checks can thus be performed, and in the case of detected changes, e.g., to libraries and / or frameworks, known effects can be searched for and analyzed.

[0054] This ensures, particularly when integrated into a DallM system, that the intended functionality is maintained and functions correctly even after an update. Using this method, it is determined whether an update can be performed without problems, or if and where incompatibilities will occur. In the case of incompatibilities, intervention can be proactively implemented to prevent malfunctions, for example, by the user, and specifically to resolve these issues in advance.

[0055] For example, if a software component installed by the user on an automation device, which requires a specific version of a programming language, e.g., Python 3.8, is to be updated, in particular a software update, and the version is to be changed as part of this update, e.g., Python from version 3.8 to version 3.10 because security vulnerabilities were discovered in version 3.8, it could be found, within the scope of or as a result of the analysis according to the invention, that libraries used in Python version 3.8 are no longer compatible with version 3.10 and that the software component would therefore no longer function correctly after the update. Consequently, the user would then be informed of this and could, for example, choose not to update the Python version and / or use the library required for version 3.10 beforehand.In particular, request or have an update performed for the library.

[0056] For example, if the first data record 16,16" containing initial device information is stored on an installed automation device, and ideally, every device with an operating system or software components should contain such a first data record 16,16" with initial device information, this can also be conveniently implemented as a so-called Software Bill of Materials (SBoM), which is supplied by the manufacturer and therefore already present on the device. If a user successfully installs further software components or programs that in turn use required libraries or drivers, the corresponding device information for these is also included in the same or one or more further SBoMs, i.e., the first data record is updated accordingly. With the sum of all SBoMs, a complete representation of all used software components with precise version identification is always available.

[0057] In the event of an upcoming further update of individual or all software components, the analysis is carried out using the computer, e.g. on the internet, i.e. in particular using a chatbot, to "determine" known problems between the installed and to-be-installed software revisions, whereby all possible combinations of all software components are considered.

[0058] Referring to the Python example, if, for instance, version 3.8 of Python is installed and the user has installed a Python project that requires a specific machine learning library, but which is only supported up to version 3.9 of Python and there is none for version 3.10, communication between the AI ​​and the internet, involving, and in particular, a multitude of databases accessible via the established internet connection, could look like this: the AI ​​would "query" via the internet whether the used machine learning library is compatible with Python 3.10 and "receive the answer" that no machine learning library exists for Python 3.10.

[0059] Such a question-and-answer process would then naturally be carried out for all used libraries for all programming languages, and the results would be displayed to the user. Generally speaking, the AI / chatbot thus "queries" the internet about known problems between the installed and to-be-installed software revisions, whereby the AI ​​also learns to search and interpret the information about version differences from the internet in order to indicate incompatibilities in advance.

[0060] If incompatibilities are detected, for example, problems "known" via the internet, the update, i.e., the software revision to be installed, is not recommended, or the system warns the user. The user is thus informed about the potential incompatibilities and can then resolve these incompatibilities before an update, if necessary. At the very least, the user is informed that if an update is initiated anyway, i.e., "forced," these incompatibilities must be resolved after the update.

[0061] As another example, let's assume that third-party software is installed on a specific asset, on which, for example, Windows 10 is installed and which is due for an update to Windows 11. Based on the information relating to the software and / or Windows contained in the first or second data record 16, 16' and 17, which includes the respective device information (where the first device information is stored, for example, in the form of SBoMs for the asset), the plaintiff then searches the information databases of the third-party vendor and / or Windows. In doing so, it is determined, for example, that a version of a library is no longer supported in Windows 11, but which the third-party vendor's software uses. Therefore, the third-party vendor's software would no longer function correctly after the update to Windows 11. Information obtained by the plaintiff in the subsequently output third data record 19 could, for example, look like this: "The software XY version 1.""Version 0 from manufacturer ABC is not supported by Windows 11." It is then up to the user of the asset to decide whether to search for a software update from the third-party manufacturer, refrain from updating to Windows 11, or, if necessary, "force" the update anyway.

Claims

Patent claims 1. Device comprising: at least one data processing device comprising a memory and an artificial intelligence, and a processor associated therewith; wherein the at least one data processing device is configured to perform the following steps: Receiving an initial data set with initial device information concerning the current state of an automation device in an automation system; Receiving a second data set with second device information concerning a state update to be performed on the automation device in advance of this state update; Checking whether the state after the state update is to be performed is compatible with the current state, whereby artificial intelligence is used and trained on a large number of different device information to find compatible device information and / or taught during operation, using the first data set with the first device information and the second data set with the second device information as input data sets and analyzing the first and second device information contained therein for compatible device information. Generate, based on the analysis, a compatibility result and; Determine, based on the compatibility result, whether the state updated according to the second device information in the case of a state update and the current state according to the first device information jointly satisfy one or more compatibility criteria; and in response to determining that the updated state and the current state do not jointly satisfy at least one of the compatibility criteria, output a third data set, which represents at least one compatibility criterion that is not jointly fulfilled.

2. Device according to claim 1, wherein the artificial intelligence uses a Large Language Model and / or a chatbot.

3. Device according to claim 1 or 2, wherein the data processing device further comprises a transmitting and receiving device and is configured to enable the artificial intelligence to access at least one database for analysis by means of the transmitting and receiving device.

4. Device according to claim 3, wherein the data processing device is further configured to establish an internet connection for accessing the at least one database.

5. Device according to one of claims 1 to 4, wherein the first data record comprising the first device information is stored in the memory and the execution of receiving the first data record comprises the step of previously reading the first data record from the memory and wherein the execution of receiving the second data record comprises the prior input of the second data record from externally.

6. Device according to one of claims 1 to 5, wherein the output of the third data set includes optical and / or acoustic output.

7. Device according to any one of claims 1 to 6, wherein the at least one data processing device is further configured to update the first data record based on the second device information after the state update has been performed.

8. Procedure, comprising the following steps: Receiving an initial data set with initial device information concerning the current state of an automation device in an automation system; Receiving a second data set with second device information concerning a state update to be performed on the automation device in advance of this state update; Checking whether the state after the state update is compatible with the current state, using artificial intelligence and training it on compatible device information based on a large number of different device information sets and / or learning it during operation, using the first data set with the first device information and the second data set with the second device information as input data sets and analyzing the first and second device information contained therein for compatible device information. Generate, based on the analysis, a compatibility result and; Determine, based on the compatibility result, whether the state updated according to the second device information in the case of state updates and the current state according to the first device information jointly satisfy one or more compatibility criteria; and in response to determining that the updated state and the current state do not jointly satisfy at least one compatibility criterion of the one or more compatibility criteria, output a third data set which represents at least the one compatibility criterion that is not jointly satisfied.

9. Computer program comprising program code means for carrying out the method according to claim 8.

10. Computer program product with a non-volatile, processor-readable storage medium comprising instructions which, when executed by a processor of a data processing device, can cause it to perform at least the following steps: Receiving an initial data set with initial device information concerning the current state of an automation device in an automation system; Receiving a second data set with second device information concerning a state update to be performed on the automation device in advance of this state update; Checking whether the state after the state update is compatible with the current state, using artificial intelligence and training it on compatible device information based on a large number of different device information sets and / or learning it during operation, using the first data set with the first device information and the second data set with the second device information as input data sets and analyzing the first and second device information contained therein for compatible device information. Generate, based on the analysis, a compatibility result and; Determine, based on the compatibility result, whether the state updated according to the second device information in the case of state updates and the current state according to the first device information jointly satisfy one or more compatibility criteria; and in response to determining that the updated state and the current state do not jointly satisfy at least one compatibility criterion of the one or more compatibility criteria, output a third data set which represents at least the one compatibility criterion that is not jointly satisfied.

11. Data carrier with a program code stored thereon, wherein the program code is designed such that a data processing device connectable to an OT network, when programmed with the program code, provides a data processing device set up according to any one of the preceding claims 1 to 7.

Images