US 12,443,473 B2
Method for performing a technical process in regular operation and repair operation
Andreas Schallenberg, Peine (DE); Stefan Gerken, Braunschweig (DE); Matthias Bolz, Braunschweig (DE); Uwe Eckelmann-Wendt, Wolfenbüttel (DE); Faustino Frechilla Daza, Madrid (ES); Fernando Meya Delfa, Madrid (ES); and Jose Luis Garcia Cano, Madrid (ES)
Assigned to Siemens Mobility Gmbh, Munich (DE)
Filed by Siemens Mobility GmbH, Munich (DE)
Filed on Aug. 30, 2024, as Appl. No. 18/820,696.
Claims priority of application No. 23194137 (EP), filed on Aug. 30, 2023.
Prior Publication US 2025/0077322 A1, Mar. 6, 2025
Int. Cl. G06F 9/54 (2006.01); B61L 27/50 (2022.01); G06F 9/48 (2006.01)
CPC G06F 9/546 (2013.01) [B61L 27/50 (2022.01); G06F 9/485 (2013.01)] 18 Claims
OG exemplary drawing
 
1. A method for performing a technical process, the method comprising:
a) executing application programs redundantly in a plurality N of computing instances; and
b) in a voting process based on an MooN (M-out-of-N) voting system, wherein M is at least two and N is at least three, comparing the plurality N of results of the redundant execution of the application programs;
c) when a minority of the results is different from a majority of the results with identical content, excluding the minority of the results from being taken into account during a performance of the technical process;
d) in a case according to step c), excluding the at least one affected computing instance responsible for generating the minority of the results from the performance of the technical process;
e) in the case according to step c), generating, by a computing instance affected by the generation of the majority of the results, a state copy of a status to be reinitialized, and storing all messages sent to the computing instances from the generation of the state copy and a sequence thereof;
f) during a reinitialization, establishing a status of the affected computing instance according to the state copy and processing all stored messages in the stored sequence by the affected computing instance until the affected computing instance runs synchronously with the computing instances that are not affected by the reinitialization; and
g) subsequently reintegrating the at least one affected computing instance into the performance of the technical process.