Container Runtime Safety Monitoring via State Data Adaptation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Kubernetes lacks specific mechanisms to support safety-critical requirements of applications, necessitating costly and time-consuming adaptations of existing program code to integrate applications into secure orchestration platforms, which complicates the development and deployment of safety-oriented applications in containerized environments.

Innovation Solution

An apparatus comprising a data generating unit, a data processing unit with logic modules including an application module, an adaptation module, and a safety monitoring module, which converts state data into a format processable by the safety monitoring module, allowing applications to adapt to safety monitoring requirements without extensive code changes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If applications are integrated into secure orchestration platforms with safety monitoring mechanisms, then safety and reliability are improved, but development costs and time increase due to required code adaptations

Engineering Contradiction:
Improvesafety monitoringVSAvoiddevelopment time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent introduces an adaptation layer that acts as an intermediary between the application and the safety monitoring module. This adaptation layer handles the conversion and formatting of data between different interfaces, allowing applications to integrate with secure orchestration platforms without requiring extensive code modifications. The adaptation layer absorbs the complexity of safety requirements, enabling seamless integration while maintaining application functionality.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system is segmented into distinct functional layers: the application layer, the adaptation layer, and the safety monitoring layer. This segmentation allows each layer to be developed and modified independently. The adaptation layer specifically handles safety-related transformations, isolating safety requirements from the core application logic and reducing the impact on development time.

Inventive Principle:
Principle #1Segmentation

2Reliability

If applications are integrated into secure orchestration platforms with safety monitoring mechanisms, then safety and reliability are improved, but development costs increase due to required code adaptations

Engineering Contradiction:
Improvesafety monitoringVSAvoiddevelopment cost
Core Design Contradiction:
ReliabilityVSEase of manufacture

Solution Approach 1:

The adaptation layer serves as a cost-effective intermediary that handles safety-related data transformations. By centralizing safety adaptations in this layer, the patent reduces the need for expensive, application-specific safety code modifications. The adaptation layer can be reused across multiple applications, lowering overall development costs while maintaining high safety standards.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The adaptation layer is designed as a universal component that can serve multiple applications with different safety requirements. This multi-functionality reduces development costs by avoiding redundant safety implementation work for each application. The same adaptation layer infrastructure supports various applications, achieving economies of scale in safety-critical system development.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Ease of operation

If state data are converted into a format processable by the safety monitoring module, then compatibility and ease of operation are improved, but device complexity increases due to the adaptation module

Engineering Contradiction:
Improvedata compatibilityVSAvoidadaptation module
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The adaptation layer acts as an intermediary that manages data format conversions between the application and safety monitoring module. While this adds a structural component, it simplifies the overall system operation by handling complexity internally. The adaptation layer presents a simple interface to both the application and safety monitoring module, improving ease of operation despite the internal complexity required for format conversion.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS20260086507A1Apparatus for the Secure Processing of Data
Publication Date: 2026.03.26 SICK AG
  • US20260086507A1 patent drawing
  • US20260086507A1 patent drawing
  • US20260086507A1 patent drawing

AI summary

An apparatus for use in an industrial environment, in particular an industrial machine, for the secure processing of data within a software container environment includes a data generating unit for generating application data and a data processing unit for processing the application data. The data processing unit, as a runtime environment, is configured to allow a plurality of logic modules to run on the data processing device. The logic modules include: at least one application module for executing at least one application using the application data and is configured to generate state data associated with the application; an adaptation module configured to receive the state data and to convert the state data into a format that is processable for a safety monitoring module configured to receive the converted state data from the adaptation module and to determine whether an error state exists on the basis of the converted state data.