Intelligent algorithms and learning are the basis for evolving smart cyber-physical production systems (CPPSs) and Industrie 4.0. A smart image detection algorithm shall be added to reduce downtime due to the extended operation of glass bottles in a yogurt producing plant. To support the engineers in doing so, a comprehensive domain-specific language (DSL), DSL4hDNCS, is introduced, enabling rapid analysis, addressing hardware/software architectures and network-related delays and uncertainties. DSL4hDNCS is defined by a metamodel to avoid ambiguity and enriched by aspects, such as safety, calculation power, and network transmission time. DSL4hDNCS is used to compare (re)deployment alternatives using different technologies, such as edge, fog, and cloud to implement the additional smart algorithm. The evaluation of DSL4hDNCS using an acknowledged Industrie 4.0 demonstrator plant as a case study confirmed the benefit for engineers during the redesign.

A trend, accompanying the change of automation systems and their architectures, is the virtualization of software components. Virtualization strengthens platform-independent development and the provision of secure and isolated applications. Virtualization introduces well-defined interfaces to strengthen modularity, which facilitates the scalability of applications. However, virtualization includes additional software components and layers and, thus, additional computing costs. This additional effort can conflict with the real-time requirements of automation processes. Current research lacks the investigation of the time behavior of container-based virtualizations concerning their use in real-time systems. An assessment concerning real-time applications is required to prepare it for use in industrial automation. This article examines the effects of virtualization on the time delays of a software component based on Docker containers by providing measurements on a hardware testbed in a realistic use case. The experiments indicate that Docker virtualization can meet soft real-time requirements and can be used in industrial automation.

For modeling Networked Control System (NCS) a standardized notation is still missing. Approaches like the Unified Modeling Language (UML) or the Systems Modeling Language (SysML) are widespread and accepted, yet remain very general and do not offer support for domain specific problems. Additionally, UML/SysML do not offer graphical support to model domain specific solutions e.g. for network architectures in NCS. UML and SysML-based approaches like MARTE, TURTLE, UML-QoS or SysML-Sec provide more guidance to model network architectures, embedded systems and network systems. However, they still lack a well-defined graphical notation, also referred as concrete syntax, to support the modeling process. To strengthen the modelling, an existing graphical notation is extended, which enables traceability to requirements and the modelling of safety-relevant properties. As case study, a train network architecture is provided to show the feasibility of this notation. Together with industrial experts, the communication architecture of a train-part is modeled and linked to its requirements. The graphical representation includes the necessary information to define the communication in the NCS and is understandable for engineers of the domain without UML/SysML knowledge. The approach was evaluated with experts from industry.

The integration of Network Intrusion Detection Systems (Network IDS) in industrial networks has improved the security of these systems due to their ability to analyze network traffic in order to detect potential system intrusions. Unfortunately, their detection scope is often limited to strategical network locations and may therefore not be capable to detect intrusions occurring at other system locations (e.g., specific devices). Hence, it is necessary to increase their detection scope by further analyzing additional information pertaining to other system components. The introduction of these new information sources adds more complexity to the intrusion detection problem, as it is not only necessary to identify them, but it is also required to define how their authentication, capture and analysis is to be carried out. Multi-Agent Systems are an architectural paradigm that can deal with such complexity. This paper presents a multi-agent approach for hybrid intrusion detection that takes into consideration the aforementioned challenges. This approach is comprised of a multi-agent hybrid intrusion detection architecture designed according to a set of properties. These properties consider IDS-specific requirements. It also takes into consideration current trends in the field of Multi-Agent Systems to provide security, scalability and adaptability across multiple systems. The feasibility of this approach is validated through a prototypical implementation.

The automation pyramid is shifting and will most likely not have a stock in rigid form. The shift is towards Cyber-Physical Systems (CPS) and Cyber-Physical Production Systems (CPPS). Some components in CPPS have to meet real-time requirements. One trend coming along with the change in automation architectures is the virtualization of applications. This enables platform independent development and deployment of secure and isolated applications. Yet, virtualization of applications comes with additional software components and therefore, additional processing effort. For web-services, virtualization is widespread, for embedded systems virtualization development and deployment is not common due time constraints of applications. The use of virtualized applications in embedded systems would have significant benefits like less effort in cross-platform development and cross compiling to state two examples. The method of virtualization in CPPS have to be evaluated concerning time-sensitive applications. In this approach, the time delays occurring through the additional virtualization layer with Docker containers are explored.

Increasing integration of different disciplines such as mechanics, electrics/electronics and control software has led to higher complexity in the development of an automated production system (aPS), bringing forth some challenges along with it. In order to address these challenges, a multi-disciplinary engineering workflow can be built using a model-based system engineering (MBSE) approach. However, the various tools in different disciplines impede the efficient collaboration of different models. Because of the implicit dependencies between different disciplines, it is difficult to ensure the consistency after a change. This paper provides an approach to building an efficient multi-disciplinary engineering workflow based on MBSE. Through a combination of SysML4Mechatronics modeling language with inconsistency management and Product Lifecycle Management (PLM), the proposed engineering workflow facilitates the design of multi-disciplinary aPS and supports information tracking, consistency assurance, as well as change analysis across disciplines. The benefits of the proposed approach are demonstrated with a case study on a lab-sized production plant.

Internet technologies are driving developments in networking technologies for mechatronic devices. In the plant and manufacturing automation domain, internet technologies support for example cloud-based data exchange and a seamless connection of the Enterprise Resource Planning (ERP) and Manufacturing Execution System (MES). The communication of sensor-actuator loops on the field level is tackled with fieldbus technologies. Fieldbuses were introduced to tackle requirements such as real-time, safety, reliability and low costs that could hardly be met with Ethernet-based communication. Therefore, a variety of proprietary fieldbuses exists for the communication at the field level. For data exchange between different fieldbuses or for data upstream to higher automation layers, gateways to process data with significant time delays are mandatory. To overcome the shortcomings of Ethernet on the field level different approaches were proposed, labeled as Industrial Ethernet or Real-Time Ethernet (RTE). With Ethernet-based communication technologies, a vertical and horizontal integration of data is supported. While in simple or homogeneous networks, the estimation of Quality of Service (QoS) via simulation or calculation is possible; In complex architectures with heterogeneous protocols, different network layers, switches and gateways measurements are required. In this approach, a testing environment is presented to analyze different Ethernet-based technologies implemented on the single board computer i.e. Raspberry Pi. Therefore, measures for software configuration and a methodic analysis workflow are presented. This is beneficial to estimate QoS in planned communication architectures including different Ethernet-based protocols and gateways after defining requirements, functions and test scenarios.

In the last decades, Networked Control Systems (NCS) has become a key aspect in different application domains of mechatronic technology (e.g. automotive, railway and industrial automation). This NCS consist of several control nodes equipped with sensors and actuators, which fulfill the specified control tasks and are interconnected by bus systems for realizing an efficient I/O communication between the end nodes and the controlling units. For some applications in these industries, where harm for human life is at risk by actions of the technical system, an architecture involving functional safety is mandatory (e.g. for certification). The development of today's mechatronic systems is widely supported by model-based engineering and design. Yet a model approach and modeling notation framework for designing the architecture of NCS in a functional safe manner is still lacking. In this paper, a notation is introduced describing the architecture, the time behavior and the safety requirements of such NCS. A Human-Robot-Collaboration system with safety aspects is proposed to evaluate the notation as a case study.