Search

A number of companies and standards development organizations have, since 2000, been producing products and standards for "time-sensitive networks" to support real-time applications that require a) zero packet loss due to buffer congestion, b) extremely low packet loss due to equipment failure, and c) guaranteed upper bounds on end-to-end latency. Often, a robust capability for time synchronization to less than 1 μs is also required. These networks consist of specially-featured bridges that are interconnected using standard Ethernet links with standard MAC/PHY layers. Since 2012, this technology has advanced to the use of routers, as well as bridges, and features of interest to time-sensitive networks have been added to both Ethernet and wireless standards.

Since the nineties, the Man-in-The-Middle (MITM) attack has been one of the most effective strategies adopted for compromising information security in network environments. In this paper, we focus our attention on ARP cache poisoning, which is one of the most well-known and more adopted techniques for performing MITM attacks in Ethernet local area networks. More precisely, we will prove that, in network environments with at least one malicious host in the absence of cryptography, an ARP cache poisoning attack cannot be avoided. Subsequently, we advance ArpON, an efficient and effective solution to counteract ARP cache poisoning, and we use a model-checker for verifying its safety property. Our main finding, in accordance with the above impossibility result, is that the only event that compromises the safety of ArpON is a cache poisoning that nevertheless is removed by ArpON itself after a very short period, thus making it practically infeasible to perpetrate an ARP cache poisoning attack on network hosts where ArpON is installed.

This paper details the design and implementation of a virtualized bottle sealing plant using the Hardware in the Loop technique, for which it is divided into two parts: (i) Software consists of a virtualized environment in Unity 3D to visualize its behavior in real time; and (ii) Hardware was implemented through a PLC S7 1200 AC/DC/RLY (Programmable Logic Controller), which is responsible for the automation of the plant, programmed through the software TIA Portal V16 (Totally Integrated Automation Portal) and a control panel with buttons and indicator lights. The two developed parts communicate through bidirectional TCP/IP Ethernet, achieving a Server–Client architecture. For real-time monitoring and visualization, a SCADA (Supervisory Control and Data Acquisition) system implemented in InTouch is considered. In addition, the data acquisition is accomplished through the OPC (Open Platform Communication) server; the functionality of the OPC server is to transmit the information generated in an industrial plant at the enterprise level. This allows the process to execute its tasks of connectivity of automated processes and their supervision, as well as having scalability so that more tags can be included in other processes over time and ensure its operability.

Data reduction (DR) techniques for the controller area network (CAN) are being developed to reduce the increased bus load caused by the growing number of electronic control units (ECUs) and automotive software complexity in modern automobiles. DR techniques enable the transmission of the same information with less bandwidth, effectively reducing the busload in CAN-based networks. Modern vehicles are composed of various in-vehicle network (IVN) protocols, such as CAN, local interconnect network (LIN), and Ethernet. However, existing DR techniques only consider the communication between CAN nodes. The application of DR techniques to a CAN bus may lead to compatibility issues when communicating with heterogeneous IVN protocols. This paper proposed a CAN/Ethernet gateway system for seamless communication with CAN DR. The proposed gateway system was implemented on a TC275-based embedded system, and its performance was evaluated and analyzed. The experimental results revealed that CAN DR compression effectively improves both the CAN bus load and end-to-end processing time of the gateway system. The CAN bus load was reduced by up to 33.68%, and the average end-to-end processing time was reduced to 336 μs.

Time-Sensitive Network (TSN) has emerged as one of the enhancement Ethernet technologies of real-time applications for future industrial networks. However, the data of TSN messages may be unexpectedly changed within the transmission duration due to electromagnetic interference. Cyclic Redundancy Check can detect such errors and notify the sender node to re-transmit the erroneous message through Automatic RepeatreQuest (ARQ). The time when the error occurs is uncertain. Consequently, the time when performing the re-transmission requests is also random, which results in different transmission sequences and violates the deterministic transmission of TSN. In addition, the returned CRC detection messages also might be at fault during transmission. In order to provide the fault tolerance capability of critical flows in TSN without violating the nature of deterministic transmission, this paper proposes a pro-active faulttolerant TSN scheduling algorithm (PFT-TSN), which not only transmits a certain number of instance copies for critical flows but provides network transmission services for non-critical flows. The challenge is that schedulability and safety of critical flows are trade-offs in terms of the number of transmissions per instance of critical flows and the schedulability. Moreover, the transmission service of non-critical flows can also affect the schedulability of critical flows. We conduct comprehensive experiments with synthetic networks to show that the proposed method can meet both safety and schedulability requirements for critical flows, and non-critical flows are also allowed to be transmitted by the service degradation.

S'ha estudiat, dissenyat i implementat un dispositiu, alimentat mitjançant el protocol PoE (Power over Ethernet), que mostra la senyal de tally d'un video mixer ATEM. Aquesta senyal serveix a l'operador de càmera per conèixer l'estat actual a realització de la seva gravació, coneixent en tot moment si es troba a programa, es a dir, en emissió; o en previ, en cas de trobar-se en preparació. Les dades es transporten des del mixer al dispositiu mitjançant un cable de xarxa Ethernet. Se ha estudiado, diseñado e implementado un dispositivo, alimentado mediante el protocolo PoE (Power over Ethernet), que muestra la señal de tally de un mezclador de vídeo ATEM. Dicha señal sirve al operador de cámara para conocer el estado actual en realización de su grabación, sabiendo en todo momento si se encuentra en programa, es decir, en emisión; o previo, en caso de encontrarse en preparación para ello. Los datos se transportan desde el mezclador al dispositivo mediante un cable de red Ethernet. This project presents the study, development and implementation of a device that displays the tally signal of an ATEM video mixer, powered by PoE (Power over Ethernet). The operator of each camera uses this signal to know if his capture is broadcasted at that specific moment, named in the mixer as program, or it is prepared to it, named as preview. The wired Ethernet system is used to transport data from the mixer to the camera position.

This work is carried out to objectively establish a new method to detect harmonics and measure the total harmonic distortion (THD) in a remote source, such as a high voltage transformer. The proposed approach utilized embedded design techniques to construct an embedded processor system with Ethernet intellectual property core to acquire data from a remote harmonics source. The designed system has several notable merits, namely, it is portable that can be applied in the work field, and it avoids workers from being subject to a hazard high voltage shock as well as its simplicity and high accuracy. The harmonics detection and analysis are achieved by inserting a microcontroller system near the high voltage transformer to acquire the necessary data and transmit it to a remote embedded processor system that is used to detect and analyze the harmonics. The microcontroller and the processor systems are connected by a wide-area network (WAN) through Ethernet and transmission control protocol/internet protocol (TCP/IP) protocols. The processor system is accommodated to perform 128 points fast Fourier transform for harmonics detection. Matlab simulations are used to validate the results. It is found that the results match very accurately the simulation results with an error of less than 0.02%.

第5回観測ロケットシンポジウム(2023年2月28日-3月1日. オンライン開催), 5th Sounding Rocket Symposium(February 28-March 1, 2023. Online Meeting), 資料番号: SA6000185014, レポート番号: Ⅱ-5

Industrial control systems present numerous challenges from the communication systems perspective: clock synchronization, deterministic behavior, low latency, high reliability, flexibility, and scalability. These challenges are mostly solved with standard technologies over Ethernet, e.g., Time-Sensitive Networking (TSN). As a research trend, it is expected that TSN will converge with wireless, leading to the Wireless TSN paradigm. Also, Wireless TSN is expected to be integrated with Ethernet TSN to create large-scale wired-wireless (Hybrid) TSN networks. The first step towards Hybrid TSN is the distribution of the clock reference from the wired to the wireless domain. In this paper, we leverage existing Ethernet TSN and wireless technologies implementations (Wi-Fi and w-SHARP) and we present two hardware architectures specifically engineered to enable the clock synchronization distribution among the network domains. The hardware architectures have been implemented over a System-on-Chip (SoC) Field Programmable Gate Array (FPGA) platform. We demonstrate through several experiments that the implementation is able to fulfill the synchronization performance required by TSN., Comment: This paper has been accepted by IEEE Transaction on Industrial informatics 2021

To establish flatten networks and accomplish rapid and efficient communications in the future hyper-scale data centers, HERO, a high-radix optical switch based on integrated silicon photonics, is proposed in this work. The architecture of HERO, including the switch fabric, switch interface and switch controller, is described in detail. Two new switch control approaches: split-transaction predictive control and wavelength-group switching, are developed. The efficient control together with the optimized high-radix integrated optical switch fabrics help HERO achieve over 1 Pbps switching capacity. Even for small packets, such as 64–256 B Ethernet packets, the maximal utilization of the switch can reach up to 83%, and the throughput can approximate 1 Pbps. Further design explorations on the packet length and some key configurations, including the number of wavelengths and wavelength groups, are also conducted in this work, paving the way to the design of high-performance flatten data-center networks in the future.

Time-Sensitive Networking (TSN) evolves from Ethernet AVB in which the Credit-Based Shaping (CBS) is employed to guarantee the deterministic transmission of traffic. In CBS, the real-time performance of traffic associated with the credits can practicably settle the uncertainty of queueing and forwarding for stream-reservation traffic. Hence, the optimization of bandwidth allocation under the CBS becomes a key point to ensure guaranteed performance in the network. In this paper, a bandwidth allocation method is proposed for stream-reservation traffic while the real-time requirements are satisfied. We first illustrate the significance of appropriate bandwidth allocation for traffic under the CBS and construct a general schema for its bandwidth allocation. Also, the influences of the protected window for Control Data Traffic (CDT) on stream-reservation traffic are considered in our method. Further, mathematical models are constructed to analyze the delay bounds and backlogs of traffic to form the feedback for the optimal bandwidth allocation process. Finally, two node-level cases with different bandwidth utilization and a synthetic industrial networking scenario are carried out to demonstrate our method. The results confirm that the excessive reserved bandwidth does not necessarily decrease the delay bound, especially under the high traffic loads scenario. A more desirable bandwidth allocation strategy under the CBS mechanism is that the reserved bandwidth should be just enough according to the traffic loads to ensure the deterministic transmission of traffic.

Ethernet is one of the widespread protocols residing in the second layer of the seven-layers Open Systems Interconnection (OSI) model. Ethernet offers various advantages which enable its widespread use in all types of network topology and becomes an essential part of computer and network architecture. Despite its features, Ethernet suffers from scalability issues where the increasing number of hosts in a single broadcast domain will significantly expand the broadcast traffic in the network. Since the emergence of software-defined networking (SDN), researchers exploited various attractive features of SDN to suppress the broadcast traffic. Although capable in addressing the scalability issue of Ethernet, the existing SDN based solutions are lacking of security mechanism, which may expose the network to various ARP based attacks. Owing to this issue, this paper proposes a floodless and secure mechanism to suppress broadcast traffic. In general, the proposed solution utilizes SDN architecture and accommodates a multistage security algorithm. The multistage security algorithm consists of three stages; each stage incorporates specific analysis to identify the packet status or behavior, and react accordingly based on its status. To demonstrate the efficiency of the proposed solution, several ARP based attack scenarios are generated and evaluated using Mininet emulator. The performance evaluation indicates that the true positive ratio for attack detection in the proposed solution is 57.14% for the first stage, 66.66% for the second stage, and in some cases may achieve 100% for the final stage.

Optical receivers (ORXs) with integrated CMOS electronics enable compact, low-power solutions for 400-G Ethernet and co-packaged optics. In this article, we present a 100-Gb/s PAM-4 ORX with TIA and sampler integrated into a single 28-nm CMOS IC. ORX sensitivity is optimized using a low noise, sub-Nyquist bandwidth TIA followed by a mixed signal sampler that includes 2-tap FFE and 2-tap DFE. A distributed current-integrating summer helps meet feedback latency requirements of 50-Gbaud direct-feedback PAM-4 DFE. Measurements characterizing the CMOS linear TIA indicate ~23-GHz trans-impedance (ZT) bandwidth (BW) with-2.5 μA $_{{rms}}$ input-referred noise. Optical measurement results at 100 Gb/s show that -8.9-dBm sensitivity is achieved at 2.4e-4 BER with 3.9-pJ/bit energy efficiency.

The data acquisition protocol currently deployed at CERN?s Quench Protection System (QPS), has limited capabilities concerning data delivery. With a prevision of a significant increase in QPS data generation, CERN sections TE-MPE-CB and TE-MPE-EP collaborated in the creation of EDAQ, an ethernet-based data acquisition protocol. This work describes the effort of integrating EDAQ into the CERN Accelerator Controls (as part of the QPS System) by developing a FESA-based application with three objectives: enabling continuous data acquisition, enabling transmission of commands to QPS devices and enabling event-based data acquisition. In order to fulfill these objectives, we mainly worked with the DQAmEth FESA class. Test results show that we achieved the first two objectives. This work also presents the strong base that has been developed for achieving the third objective. El protocolo de adquisición de datos actualmente desplegado en el Sistema de Protección contra 'Quenches' del CERN (QPS), tiene capacidades limitadas con respecto a la transmisión de datos. Previendo un aumento significativo en la generación de datos de dicho sistema, las secciones TE-MPE-CB y TE-MPE-EP del CERN han colaborado ??en la creación de EDAQ, un protocolo de adquisición de datos basado en ethernet. Este trabajo describe el esfuerzo llevado a cabo para integrar EDAQ en el sistema de Control de Aceleradores del CERN (como parte del sistema QPS) mediante el desarrollo de una aplicación, basada en FESA, con tres objetivos: permitir la adquisición continua de datos, permitir la transmisión de comandos a dispositivos QPS y permitir la adquisición de datos basada en eventos. Para cumplir con estos objetivos, hemos trabajado principalmente con la clase de FESA llamada DQAmEth. Los resultados de los tests muestran que cumplimos satisfactoriamente los dos primeros objetivos. Este trabajo también presenta la base sólida desarrollada para poder lograr el tercer objetivo. El protocol d'adquisició de dades desplegat actualment al Sistema de Protecció contra 'Quenches' del CERN (QPS), té capacitats limitades pel que fa a la transmissió de dades. Preveient un augment significatiu de la generació de dades d'aquest sistema, les seccions TE-MPE-CB i TE-MPE-EP del CERN van col·laborar en la creació d'EDAQ, un protocol d'adquisició de dades basat en Ethernet. Aquest treball descriu l'esforç fet per integrar EDAQ al sistema de Control d'Acceleradors del CERN (com a part de QPS) mitjançant el desenvolupament d'una aplicació basada en FESA que té tres objectius: permetre l'adquisició contínua de dades, permetre la transmissió d'ordres als dispositius QPS i permetre l'adquisició de dades basada en esdeveniments. Per tal d'assolir aquests objectius, vam treballar principalment amb la classe de FESA anomenada DQAmEth. Els resultats dels tests mostren que hem assolit els dos primers objectius. Aquest treball també presenta la base sòlida que s'ha desenvolupat per aconseguir el tercer objectiu.

Operators of production plants are increasingly emphasizing secure communication, including real-time communication, such as PROFINET, within their control systems. This trend is further advanced by standards like IEC 62443, which demand the protection of realtime communication in the field. PROFIBUS and PROFINET International (PI) is working on the specification of the security extensions for PROFINET (“PROFINET Security”), which shall fulfill the requirements of secure communication in the field. This paper discusses the matter in three parts. First, the roles and responsibilities of the plant owner, the system integrator, and the component provider regarding security, and the basics of the IEC 62443 will be described. Second, a conceptual overview of PROFINET Security, as well as a status update about the PI specification work will be given. Third, the article will describe how PROFINET Security can contribute to the defense-in-depth approach, and what the expected operating environment is. We will evaluate how PROFINET Security contributes to fulfilling the IEC 62443-4-2 standard for automation components. Two of the authors are members of the PI Working Group CB/PG10 Security.

Industry 4.0 is the current and future of the automation industry, and real-time systems play a vital role in its success. The automotive and automation industry has benefitted from the efficiency and productivity of embedded systems in both past and present and with more demanding schedules and time-critical applications taking their place in the modern world the importance of real-time systems cannot be overstated. For time-critical communication on an industrial level, there have been major improvements. The newest player is Time Sensitive Networks. It is packed with standards targeting time-critical transmissions. There is not much work done on the practical implementation of Time Sensitive Networks. A handful of research was available on Time Sensitive Networks, with most of them being software and simulation-based. The main focus of this study was data link layer comparisons of Ethernet and Time Sensitive Networks. The comparison-based analysis was done on Ethernet IEEE 802.3 ab and Time Sensitive Networks IEEE 802.1. The two main standards that will be used are IEEE 802.1 Qbu frame pre-emption and IEEE 802.1 Qbv enhancement for scheduled traffic. A series of tests were performed on Ethernet and Time Sensitive Networks to find the best possible configurations. The last step was to apply all the information gathered from the testing phase. This was achieved by preparing a real life scenario based network, and then running the Ethernet and Time Sensitive Networks settings on the same setup. The last test drew comparisons on parallel execution. The final verdict was on jitter and latency performances

Рассматривается эволюция средств и систем автоматизации, цифровых технологий, применяемых на современных промышленных производствах. Показан последовательный переход от комплексной автоматизации к цифровизации производств в период 2003-2023 гг., Автоматизация в промышленности, Выпуск 1 2023, Pages 3-10

El proyecto de titulación lleva a cabo la repotenciación y la realización de prácticas de control de un motor con diferentes tipos de arranque, a través del controlador LOGO Siemens V8.3 y también su software Logo Web Editor. La actualización de dispositivos es importante, para que los estudiantes puedan familiarizarse con las nuevas tecnologías que se van incorporando al mercado industrial. LOGO OBA07 fue el primer dispositivo de esta familia con Ethernet, lo cual le dio una gran acogida, pero para los requerimientos de la industria actual es limitado. Por esta razón es que dentro de esto proyecto se opta por reemplazar el dispositivo OBA07 por el LOGO V8.3 que cuenta con una pantalla de 3 colores, físicamente tiene menor tamaño, interfaz Ethernet integrada y protocolo Modbus TCP/IP. LOGO V8.3 también ofrece la posibilidad de trabajar con un servidor web personalizado, el cual se configura a través del software Logo Web Editor y se carga en una tarjeta de memoria micro SD misma que se inserta en la parte frontal del dispositivo. The degree project carries out the repowering and control practices of a motor with different types of starters, through the LOGO Siemens V8.3 controller and also its Logo Web Editor software. Updating devices is important, so that students can become familiar with the new technologies that are being incorporated into the industrial market. LOGO OBA07 was the first device in this family with Ethernet, which was very well received, but for today's industry requirements it is limited. For this reason, within this project it is decided to replace the OBA07 device with LOGO V8.3, which has a 3-color screen, is apparently smaller, has an integrated Ethernet interface and Modbus TCP/IP protocol. LOGO V8.3 also offers the ability to work with a custom web server, which is configured via the Logo Web Editor software and loaded onto a micro SD memory card that is inserted into the front of the device.

Robust real-time communication is crucial in many safety-critical systems, such as air-crafts. One example of real-time communication within an aircraft is the Ethernet-based protocol called Proprietary Real-Time Ethernet (PRTE), used for sensor data and other hard real-time information exchange. Meanwhile Time Sensitive Networking (TSN) is an emerging group of standards being developed by IEEE, which extends standard Ethernet with real-time capabilities. This thesis investigates the possibility of augmenting a Proprietary Real-Time Ethernet (PRTE) network with TSN functionality, in order to allow for additional, less safety-critical, traffic classes on the same network infrastructure while ensuring real-time correctness of PRTE. A software simulation method through the OMNeT++ 6.0 and INET 4.4 frameworks is used to create and evaluate a small model network. Realistic PRTE traffic is modelled and generated with the help of an XML file with an incomplete PRTE schedule. The same PRTE schedule file is used to calculate an 802.1Qbv schedule for protective TSN windows, used to prevent the PRTE traffic from interference. Additional traffic classes in the form of best-effort traffic are introduced to the network, and multiple network traffic scenarios are considered to evaluate the performance of the network. Both the performance of the PRTE traffic and the non-real-time critical best-effort Ethernet traffic is assessed. The TSN features successfully protect the time-sensitive traffic from interference while inducing a negligible latency increase by introducing the 802.1Q header required by TSN. The best-effort traffic throughput is lowered by a small amount, which is expected as the scheduled traffic reserves bandwidth. The worst-case end-to-end latency of the best-effort traffic is slightly increased across the board, but remains fairly similar to the baseline scenario without TSN windows. Overall, the results are promising and prove that the method can guarantee both PRTE and best-effort performance with minor performance loss. Robust realtidskommunikation är oumbärligt i många säkerhetskritiska system, som till exempel flygplan. Ett protokoll för realtidskommunikation inom flygplan är det Ethernet-baserade protokollet Proprietary Real-Time Ethernet (PRTE) som används för att skicka bland annat sensordata och annan realtidsinformation. Ett annat exempel är Time Sensitive Networking (TSN), som är en framväxande samling av standarder som utvecklas av IEEE. Time Sensitive Networking (TSN) utökar standard-Ethernet och introducerar realtidsfunktionalitet. Denna rapport undersöker möjligheten att utöka funktionaliteten i Proprietary Real-Time Ethernet (PRTE)-nätverk med TSN-funktionalitet och på så sätt tillåta lägre tidskritiska trafikklasser att kommunicera på samma nätverk, utan att kompromissa på realtids-korrektheten i Proprietary Real-Time Ethernet (PRTE). Mjukvarusimulering med OMNeT++ 6.0 och INET 4.4 används för att skapa och utvärdera små modellnätverk. Realistisk PRTE-trafik modelleras och genereras med hjälp av en XML-fil som innehåller ett ofullständigt PRTEschema. Samma schema-fil används för att generera ett schema med skyddande TSN-fönster enligt 802.1Qbv-standarden. Dessa fönster används för att skydda PRTE-trafiken från lägre prioriterad trafik, och tillåter då så kallad Best Efforttrafik mellan tidskritiska fönster. Olika mönster av Best Effort-trafik genereras och dess effekt på nätverket utvärderas. Både prestandan av PRTE och Best Effort-trafiken tas i beaktning. TSN-funktionerna lyckas med att skydda den tidskritiska trafiken, och leder endast till väldigt låga latens-ökningar på grund av att 802.1Q-headers introduceras. Överföringshastigheten för Best Effort-trafik minskade något, vilket var förväntat då de schemalagda TSN-fönstren tar upp bandbredd. Värstafallsfördröjningen i Best Effort-trafiken ökade något över lag, men höll sig förhållandevis nära grundscenariot utan TSN-fönster. Sammantaget är resultaten lovande och bevisar att metoden kan garantera leverans av PRTE-paket samtidigt som Best Effort-trafik skickas med små prestandaförluster.

This paper reflects the content of the presentation “The Next Generation: Ethernet-APL for Safety Systems” at the NAMUR Annual General Meeting 2022. It deals with the use of the Ethernet Advanced Physical Layer (Ethernet-APL) in combination with the PROFINET/PROFIsafe protocol for safety applications. It describes the virtues of the digital communication between the field and safety system. In parallel the aspect of OT security for this use case is touched as well. The paper proposes a secure architecture, where safety- and non-safety field communications are still separated. At the end a set of requirements for the development of future APL devices is described., Dieser Beitrag gibt den Inhalt des Vortrags „The Next Generation: Ethernet-APL for Safety Systems“ auf der NAMUR-Hauptsitzung 2022 wieder. Er befasst sich mit der Nutzung des Ethernet Advanced Physical Layer (Ethernet-APL) in Kombination mit dem PROFINET/PROFIsafe-Protokoll für Sicherheitsanwendungen und beschreibt die Vorzüge der digitalen Kommunikation zwischen Feld und Sicherheitssystem. Parallel dazu wird auch der Aspekt der OT-Security für diesen Anwendungsfall behandelt. Der Beitrag schlägt eine sichere Architektur vor, bei der die sicherheitsgerichtete und die nicht sicherheitsgerichtete Feldkommunikation getrennt sind. Abschließend wird eine Reihe von Anforderungen für die Entwicklung zukünftiger APL-Geräte beschrieben.

Se ha propuesto como objetivo para éste trabajo idear e integrar un sistema de comunicación basado en Ethernet para un microcontrolador, siendo éste utilizado en un cuadro de instrumentación para motocicletas, y además comparar y evaluar su funcionamiento en contraste a otros métodos de comunicación relevantes en el mundo de la automoción, siendo el principal sujeto el bus CAN. El proyecto ha permitido llevar a cabo el desarrollo de controladores hardware además de una serie de librerías software a fin de tener la posibilidad de utilizarse de forma conjunta con aplicaciones de alto nivel en motocicletas. S'ha proposat com a objectiu per a aquest treball idear i integrar un sistema de comunicació basat en Ethernet per a un microcontrolador, sent aquest utilitzat per a un quadre d'instrumentació per a motocicletes, i a més comparar i avaluar el seu funcionament en contrast a altres mètodes de comunicació rellevants en el món de l'automoció, essent el principal subjecte el bus CAN. El projecte ha permès portar a terme el desenvolupament dels controladors hardware a més d'una sèrie de llibreries software a fi de tenir la possibilitat de fer-se servir de forma conjunta en aplicacions d'alt nivell en motocicletes. The proposed objective for this project has been to design and implement an Ethernet based communication system for an existing microcontroller, which has its main use in motorcycle dashboards. The communication system performance and overall functionality has also been evaluated and compared with other relevant communication methods, with the most prominent being the CAN bus. The project has also allowed to develop hardware controllers as well as software libraries for Ethernet, in an effort to possibly allow the system to be used in higher level applications in motorcycles.

The rapid deployment of the Internet of Things (IoT) devices have led to the development of innovative information services, unavailable a few years ago. To provide these services, IoT devices connect and communicate using networks like Bluetooth, Wi-Fi, and Ethernet. This full-stack connection of the IoT devices has introduced a grand security challenge. This paper presents an IoT security framework to protect smart infrastructures from cyber attacks. This IoT security framework is applied to Bluetooth protocol and IoT sensors networks. For the Bluetooth protocol, the intrusion detection system (IDS) uses n-grams to extract temporal and spatial features of Bluetooth communication. The Bluetooth IDS has a precision of 99.6% and a recall of 99.6% using classification technique like Ripper algorithm and Decision Tree (C4.5). We also used AdaBoost, support vector machine (SVM), Naive Bayes, and Bagging algorithm for intrusion detection. The Sensor IDS uses discrete wavelet transform (DWT) to extract spatial and temporal features characteristics of the observed signal. Using the detailed coefficients of Biorthogonal DWT, Daubechies DWT, Coiflets DWT, Discrete Meyer DWT, Reverse Biorthogonal DWT, Symlets DWT, we present the results for detecting attacks with One-Class SVM, Local Outlier Factor, and Elliptic Envelope. The attacks used in our evaluation include Denial of Service Attacks, Impersonation Attacks, Random Signal Attacks, and Replay Attacks on temperature sensors. The One-Class SVM performed the best when compared with the results of other machine learning techniques.

The Jiangmen Underground Neutrino Observatory (JUNO) is a multi-purpose underground neutrino experiment. About 18000 20-inch photomultipliers (PMTs) are instrumented in the Central Detector to detect the photons, and the signals will be captured by high-speed high-resolution waveform full sampling technique. In addition, about 25000 3-inch PMTs are also instrumented to capture T/Q Hits information. This work builds a DAQ readout prototype system for JUNO, which can be used to test the full readout chain for 20-inch and 3-inch PMTs. The system is designed to continuously readout the data flow from multiple electronics channels, check the raw data, and finally save them into disk. Meanwhile, the graphical user interface (GUI) provides a real time display of the sampled waveforms. The system is developed with the open source Qt platform. The design and performance of the system have been verified in detail, particularly by performance test based on Gigabit Ethernet and 10-Gigabit Ethernet. A DAQ readout prototype system has been developed for JUNO, which is successfully applied to electronics testing system in Italy and PMT testing system in Guangdong.

By massively digitalizing production processes, the industry expects an efficient and secure cooperation of a large number of machines, as well as an increasing integration of IT-systems for control and services, for instance using edge clouds. Their vision calls for a distributed, converged datacom and telecom infrastructure where performance, can be deterministic per application, i.e. strictly guaranteed, end-to-end, across technologies and across layers. Its success will largely depend on how dynamically it can reuse resources and how cost-effectively it can host mainstream best-effort applications. In this paper, we review the key performance indicators for such an infrastructure while confronting them to thirty use cases reported by the industry. We then examine the requirements for the digital infrastructure. We benchmark them against the capabilities of relevant network technologies, while pointing to meaningful enhancements. We particularly discuss Time-Sensitive Networking (TSN), a set of standards extending IEEE 802.1 Ethernet with some deterministic functions, which is considered to be the most promising enabling technology for future industrial networks. We propose to augment its scalability with a novel optical backbone which can interconnect islands of TSN networks while preserving timing.

Industry 4.0 will revolutionize industrial automation. Yet, future smart factories will not be created from scratch. They will rather evolve from existing legacy installations. Consequently, also industrial networks will evolve and the result will be a mixture of new and legacy components. This will make new security mechanisms necessary, that are specifically designed for this industrial use case. This work proposes modifications for MACsec [1] , a new security protocol for protecting communication traffic. These modifications enable MACsec to work within future industrial settings, circumventing drawbacks introduced by legacy networking technologies. Furthermore, we managed to significantly increase the performance of MACsec.

Introduction. The paper deals with the problem of automated construction of a local area network using tools and methods for traffic analysis at the link layer of OSI model. The problem is caused by two factors. These are difficulties of the manual determination of the communication between equipment and the lack of physical access to communication lines of an already functioning network. The purpose of the work is to reduce the time spent on building a local network diagram through automating the process of determining the communication between the equipment.Materials and Methods. To solve the set tasks, a method for determining the relative location of devices is proposed. The network adapters of a specialized software and hardware complex, which are connected to a communication line break at different points of the network, are used in opposite directions. The method used is based on calculations of intersections of address sets received from these adapters. The structural schemes of the construction of such a software and hardware complex and the requirements for it are given. The methods of obtaining MAC addresses from transit packets are described. Examples of libraries of software components for performing this operation are given. The structure of a relational database is proposed for storing the received data. The format and content of the fields of its table are described.Results. Using the developed methods, a typical example of an Ethernet network shows a way to determine the relative location of end devices specified by their MAC addresses, as well as at least two switches located between them. The signs by which it is possible to judge the presence of switching equipment in a particular segment are determined. A method is proposed that enables through using a set of relational operations, to sequentially refine the network topology until the required accuracy is achieved.Discussion and Conclusions. The results obtained can be used under the administration of large local networks with an extensive structure. The proposed approach allows you to reduce the time required for building a scheme. This is possible due to the automation of the process of obtaining information about devices operating on the network and their mutual location.

Nowadays there is a growing demand for a much faster and more secure communication without borders through the internet, which is provoking more and more both network designers and manufacturers of communication devices. Thanks to the BYOD trend, our communication devices can be easily carried anywhere in the world. They generally have several built-in network interfaces (e.g. Ethernet, Wi-Fi, 4G). Theoretically, using these cards in parallel, we could speed up data transmission, and thus communication, by aggregating the channel capabilities of the interfaces. On the other hand, we could make data transmission more secure by applying redundancy to the system. Unfortunately, traditional IP-based communications do not allow the use of parallel interfaces in a given communication session, leaving the hardware capabilities of our communications devices virtually untapped. To address this issue, we have developed a multipath communication solution called MPT-GRE, which we have already tested in several laboratory environments. The measurement results were published in our previous articles. In this paper we are going to test it in a much more realistic environment, using the Dummynet WAN emulation software. The measurement results confirmed that the MPT-GRE multipath solution is able to aggregate the performance of physical connections efficiently in the emulated Fast Ethernet IPv4 WAN environment as well.

With the development of intelligent and connected vehicles, onboard Ethernet will play an important role in the next generation of vehicle network architectures. It is well established that accurate timing and guaranteed data delivery are critical in the automotive environment. The time-sensitive network (TSN) protocol can precisely guarantee the time certainty of the key signals of automotive Ethernet. With the time-sensitive network based on automotive Ethernet being standardized by the TSN working group, the TSN has already entered the vision of the automotive network. However, the security mechanism of the TSN protocol is rarely discussed. First, the security of the TSN automotive Ethernet as a backbone E/E (electrical/electronic) architecture is analyzed in this paper through the Microsoft STRIDE threat model, and possible countermeasures for the security of automotive TSNs are listed, including the security protocol defined in the TSN, so that the TSN security protocol and the traditional protection technology can form a complete automotive Ethernet protection system. Then, the security mechanism per-stream filtering and policing (PSFP) defined in IEEE 802.1Qci is analyzed in detail, and an anomaly detection system based on PSFP is proposed in this paper. Finally, OMNeT++ is used to simulate a real TSN topology to evaluate the performance of the proposed anomaly detection system (ADS). As a result, the protection strategy based on 802.1Qci not only ensures the real-time performance of the TSN but can also isolate individuals with abnormal behavior and block DoS (denial of service) attacks, thus attaining the security protection of the TSN vehicle-based network.

This study is a contribution towards leveraging deep learning to further automate the design of communication architectures used in critical systems and, ultimately, design systems that are more efficient in terms of resource usage. Two well identified use-cases of deep-learning, and AI at large, in the design of critical systems are 1) fast prediction techniques that can replace, at some stages of the design, exact approaches, and 2) technology-agnostic configuration algorithms, {\it i.e.} algorithms not relying on extensive domain knowledge. This paper contributes to the first use-case and presents what is, to the best of our knowledge, the first deep learning model for feasibility prediction of real-time Ethernet networks. Machine learning has been recently applied in real-time systems to predict whether Ethernet network configurations are feasible in terms of meeting deadline constraints without executing conventional schedulability analysis. However, the existing prediction techniques require domain expertise to choose the relevant input features and may perform poorly when topologies or traffic patterns differ significantly from the ones in the training data. To overcome these problems, we propose a Graph Neural Network (GNN) prediction model that synthesizes relevant features directly from the raw data. This deep learning model possesses the ability to exploit relations among flows, links, and queues in switched Ethernet networks, and, over the 13 testing sets used in this work, has proven an ability to generalize beyond the training data that is significantly superior to traditional ML algorithms. We also explore the use of ensembles of GNNs and show that it enhances the robustness of the predictions. An evaluation on heterogeneous testing sets comprising actual automotive networks, shows that ensembles of 32 GNN models features a prediction accuracy ranging from 79.3% to 90% for Ethernet networks using priorities as the Quality-of-Service mechanism. The use of ensemble models provides a speedup factor ranging from 77 to 1715 compared to schedulability analysis. Such speed-up factors unlock new possibilities for design-space exploration and the development of near-interactive design tools. A practical advantage of our model is that it automates the feature engineering process, and does not require domain expertise. In that regard, the model could potentially be efficient in other areas of real-time computing.

Flexible Ethernet (FlexE) over WDM transport is one of the key technologies for achieving high-speed next generation radio access network (NG-RAN). The security issue, such as optical fiber wiretap, becomes increasingly prominent. However, optical or electrical layer secure strategies cannot support higher rate and lower overhead transport, respectively. To this end, in this paper, we propose a cross-layer secure transport strategy in end-to-end FlexE over WDM networks, which leverages Universal Hashing based FlexE data block permutation and multiple parallel fiber transmission to achieve anti-eavesdropping. Different levels of attack ability are considered for measuring the impact on network security and resources utilization. Furthermore, the trade-off between efficient resources utilization and guarantee of higher level of transport security is also explored through building an integer linear programming (ILP) model. For the computation complexity of ILP model at large scale input conditions, a Security and resource-Efficiency-oriented Ant Colony optimization algorithm (SEAC) is proposed. Simulation results show that the cross-layer defense strategy is effective to struggle against intruders with different levels of attack ability, and the SEAC algorithm can achieve near-optimal performance and outperform the traditional first-fit algorithm.

This article studies the cross-layer network planning that tries to combine flexible Ethernet (FlexE) and elastic optical networks (EONs), for FlexE-over-EONs. We focus our investigation on the most challenging setting, i.e. , the FlexE-over-EONs based on the FlexE-aware architecture, and consider both single-hop and multi-hop scenarios for the cross-layer planning. For the single-hop scenario, we assume that all the client flows are routed over end-to-end lightpaths in the EON. We formulate a mixed integer linear programming (MILP) model for this problem, transform it into the class constrained bin packing problem (CCBP), and leverage the primal-dual interior-point (PDIP) method to propose a polynomial-time approximation algorithm for it. Then, for the multi-hop scenario, we use a more realistic assumption that each client flow can be routed over multiple lightpaths in the EON. We show that after solving the virtual topology design, the cross-layer planning in this scenario can be transformed into that in the single-hop scenario. Therefore, an integer linear programming (ILP) model is formulated to tackle the virtual topology design, and we design a polynomial-time approximation algorithm for it by modifying the well-known branch-and-bond method. To evaluate the performance of our two-step method for the multi-hop scenario, we also propose a heuristic algorithm. Extensive simulations verify that regarding large-scale cross-layer planning for FlexE-over-EONs, our approximation algorithms are significantly more time-efficient than the ILP/MILP models, and their solutions have bounded gaps to the optimal ones and are much better than those of the heuristic.

Ovim završnim radom je postignuta komunikacija preko LAN mreže odnosno komunikacija između mikroupravljača preko Ethernet protokola. Pomoću Arduino razvojnog okruženja je prikazana jednostavnost i korisnost dvosmjerne komunikacije putem protokola. Znanje koje smo stekli ovim završnim radom uz dodatnu nadogradnju je moguće primijeniti u većim sustavima i mrežama. This final work has accomplished a communication over a LAN network, that is, communication between microcontrollers via the Ethernet protocol. Using the Arduino development environment, the simplicity and usfulness of two way communication via the protocol is demonstrated. The knowledge we have gained through this final work with additional upgrades can be applied in larger systems and networks. Keywords: Arduino boards, Ethernet, communication, protocols

Un túnel de levitación neumática es un dispositivo que ha evolucionado desde su creación, pasando de ser un equipo enteramente experimental y para comprobación; a diversificar su uso a ámbitos de entrenamiento profesional y entretenimiento en general. Al dejar de tener en su interior únicamente objetos, mecanismos o máquinas sujetas a comprobación de sus características aerodinámicas, y pasar a ser de uso personal; el correcto control del flujo de aire dentro de estos dispositivos se volvió una necesidad imperiosa. Un control enteramente manual de velocidad o flujo de aire caracteriza a este tipo de túneles de levitación neumática, o mejor conocidos como túneles de viento. La presencia de una persona dentro del túnel, realizando una actividad recreativa, profesional o de entrenamiento, exige un control más avanzado para garantizar la seguridad de quien lo utiliza, siendo lo esencial diversificar sus medios de mando. Por lo indicado, en este documento se presenta el desarrollo de un túnel de levitación neumática que utiliza un sistema embebido para la optimización de medios de mando y control. El sistema es una representación a pequeña escala de un túnel de viento con la inclusión de métodos de mando variados a través de una tarjeta de desarrollo TIVA TM4C129. El sistema tiene un control por retroalimentación, con la adquisición de posición de un perdigón por medio de un sensor de distancia de tecnología ultrasónica, que va al controlador para manipular la salida del sistema en la magnitud que sea necesario para satisfacer las consignas de funcionamiento. El sistema varía el flujo de aire presente dentro del túnel para controlar la posición del perdigón gracias a la acción de un EDF (Electric Ducted Fan) de velocidad controlable. Los métodos de mando incorporados para este túnel se implementaron en concordancia con la optimización deseada para el sistema, como con una imperante necesidad de incremento de los niveles de seguridad que podrían estar incluidos en los sistemas a gran escala. Se adicionaron métodos de mando de manera natural a través de una comunicación tradicional, mandos gráficos mediante HMI y comunicación Ethernet, y mando mediante un sensor colocado para interacción humana. A pneumatic levitation tunnel is a device that has evolved since its creation, going from an entirely experimental equipment and for verifications; to diversify its usage to professional training and general entertainment spheres. By no longer having inside it only objects, mechanisms, and machines subjects of verification of their aerodynamic characteristics, and going to a usage with people involved. Therefore, the correct control of the airflow inside of these devices became an imperative need. An entirely manual control of the airflow is the main characteristic of these types of pneumatic levitation tunnels, or better known as wind tunnels. The presence of a person inside the tunnel, doing a recreative, professional or training activity, demands a more advanced control to guarantee the safety of who is using it, being the essential to diversify its means of command. Due to all wrote down above, in this document is shown the development of a pneumatic levitation tunnel using an embedded system for the optimization of the command´s means and control. The system is a small-scale representation of a wind tunnel with the inclusion of assorted command´s means trough a TIVA TM4C129 development board. The system has a feedback control, with the acquisition of the position of a pellet with the usage of an ultrasonic technology sensor, which goes to the controller to manage the system output in the necessary size to satisfy the operating set points. The system varies the airflow inside the tunnel to control pellet position with the action of an EDF (Electric Ducted Fan) of controllable Speed. Command´s means incorporated for this tunnel were implemented in concordance with the desired optimization for the system, as a prevailing need of increasing the security levels that could be included in the big scale systems. There were added command´s means in natural way through traditional communication, graphic command through HMI and Ethernet communication, and command through a sensor placed for human interaction.

The train communication Ethernet (TCE) of modern intelligent trains is under an ever-increasing threat of serious network attacks. Denial of service (DoS) and man in the middle (MITM), the two most destructive attacks against TCE, are difficult to detect by conventional methods. Aiming at their highly time-correlated properties, a novel dynamic temporal convolutional network-based intrusion detection system (DyTCN-IDS) is proposed in this paper to detect these temporal attacks. A semiphysical TCE testbed that is capable of simulating real situations in TCE-based trains is first built to generate an effective dataset for training and testing. DyTCN-IDS consists of two phases, and in the first phase, systematic feature engineering is designed to optimize the dataset. In the second phase, a basic detection model that is good at dealing with temporal features is first built by utilizing the temporal convolutional network with several architectural optimizations. Then, in order to decrease the computational consumption waste on network packet sequences with different lengths of inner temporal relationships, dynamic neural network technology is further adopted to optimize the basic detection model. Diverse experiments were carried out to evaluate the proposed system from different angles. The experimental results indicate that our system is easy to train, converges fast, costs less computational resources, and achieves satisfying detection performance with a macro false alarm rate of 0.09%, a macro F-score of 99.39%, and an accuracy of 99.40%. Compared to some canonical DL-based IDS and some latest IDS, our system acquires the best overall detection performance as well.

With the rapid growth of electronic chip’s performance, electric signal limits chip I/O in power consumption, reachability, and signal quality. In this letter, we propose a new chip-let architecture for chip-level optical interconnect. An optic I/O chip-let including an ultra-small optic transceiver and electronic components is implemented. Our analysis shows that the optical interconnect based on this architecture can achieve 1/3 power consumption and 1/2 area compared with traditional board-level optical interconnect in Ethernet NIC application. By adopting the architecture we proposed, the optic I/O chip-let can support any payload IC such as CPU, GPU, switch to have optic I/O.

Graphene-based photodetectors have attracted significant attention for high-speed optical communication due to their large bandwidth, compact footprint, and compatibility with silicon-based photonics platform. Large-bandwidth silicon-based optical coherent receivers are crucial elements for large-capacity optical communication networks with advanced modulation formats. Here, we propose and experimentally demonstrate an integrated optical coherent receiver based on a 90-degree optical hybrid and graphene-on-plasmonic slot waveguide photodetectors, featuring a compact footprint and a large bandwidth far exceeding 67 GHz. Combined with the balanced detection, 90 Gbit/s binary phase-shift keying signal is received with a promoted signal-to-noise ratio. Moreover, receptions of 200 Gbit/s quadrature phase-shift keying and 240 Gbit/s 16 quadrature amplitude modulation signals on a single-polarization carrier are realized with a low additional power consumption below 14 fJ/bit. This graphene-based optical coherent receiver will promise potential applications in 400-Gigabit Ethernet and 800-Gigabit Ethernet technology, paving another route for future high-speed coherent optical communication networks., Graphene-based photodetectors have many advantages for applications. Here, the authors demonstrate a high-speed optical coherent receiver for optical communications based on graphene-on-plasmonic slot waveguide photodetectors.

Wide-scale adoption of optoacoustic imaging in biology and medicine critically depends on availability of affordable scanners combining ease of operation with optimal imaging performance. Here we introduce LightSpeed: a low-cost real-time volumetric handheld optoacoustic imager based on a new compact software-defined ultrasound digital acquisition platform and a pulsed laser diode. It supports the simultaneous signal acquisition from up to 192 ultrasound channels and provides a hig-bandwidth direct optical link (2x 100G Ethernet) to the host-PC for ultra-high frame rate image acquisitions. We demonstrate use of the system for ultrafast (500Hz) 3D human angiography with a rapidly moving handheld probe. LightSpeed attained image quality comparable with a conventional optoacoustic imaging systems employing bulky acquisition electronics and a Q-switched pulsed laser. Our results thus pave the way towards a new generation of compact, affordable and high-performance optoacoustic scanners.

As radiation detector arrays in nuclear physics applications become larger and physically more separated, the time synchronization and trigger distribution between many channels of detector readout electronics become more challenging. Clocks and triggers are traditionally distributed through dedicated cabling, but newer methods such as the IEEE 1588 Precision Time Protocol and White Rabbit allow clock synchronization through the exchange of timing messages over Ethernet. Consequently, we report here the use of White Rabbit in a new detector readout module, the Pixie-Net XL. The White Rabbit core, data capture from multiple digitizing channels, and subsequent pulse processing for pulse height and constant fraction timing are implemented in a Kintex 7 field programmable gate array (FPGA). The detector data records include White Rabbit timestamps and are transmitted to storage through the White Rabbit core’s gigabit Ethernet data path or a slower diagnostic/control link using an embedded Zynq processor. The performance is characterized by time-of-flight style measurements and by time correlation of high energy background events from cosmic showers in detectors separated by longer distances. Software for the Zynq processor can implement “software triggering,” for example to limit recording of data to events where a minimum number of channels from multiple modules detect radiation at the same time.

The COMET experiment at J-PARC aims to search for the neutrinoless transition of a muon to an electron. We have developed the readout electronics board called ROESTI for the COMET straw tube tracker. We plan to install the ROESTI in the gas manifold of the detector. The number of vacuum feedthroughs needs to be reduced due to space constraints and cost limitations. In order to decrease the number of vacuum feedthroughs drastically, we developed a network processor with a daisy-chain function of Gigabit Ethernet for the FPGA on the ROESTI. We implemented two SiTCPs, which are hardware-based TCP processors for Gigabit Ethernet, in the network processor. We also added the data path controllers which handle the Ethernet frames and the event data. The network processor enables ROESTI to process the slow control over UDP/IP and to transfer event data over TCP/IP. By using the network processor, we measured the throughput, the stability, and the data loss rate for two to six ROESTIs. In any number of boards, the throughput of the event data transfer achieved the theoretical limit of TCP over the Gigabit Ethernet stably and ROESTI stably sent 100% of the data., IEEE Real Time 2020 Conference, 8 pages, 17 figures

To be successful in the quickly evolving future of machine building and meet the increasingly complex requirements of manufacturers, equipment manufacturers face challenges of reconfigurability on the motion controller. This article proposes a cyber–physical codesign approach to enable plug-and-play of field devices via real-time Ethernet in controllers. In our proposal, we first design a modular runtime framework to facilitate auto-discovery and self-configuration of servo drives with EtherCAT. Then, we implement a self-adaptive period synthesis method for real-time scheduling. The method can automatically attain a combination of minimized periods for communication and control task during startup and achieve dynamic compensations of drifts and jitters occurred in the network. Through experiments, we show that for various combinations of cyber–physical settings, our proposal can ensure low jitters ( $ 10 μs) and stable latencies with a 125 μs cycle time and achieve runtime reconfiguration with a 250 μs or larger cycle time.

India's health infrastructure is under pressure since the daily COVID-19 cases have crossed the milestone of 4 Lakhs cases per day which surpass the previous years' peak. Patients with mild symptoms have been advised for home treatment since most of the hospitals are running out of bed. In this situation delivering healthcare to people has become revolutionizing due to the rapid advancement of embedded systems, communication, and informatics technologies. Integration of different health sensors, handheld devices, and internet can be a great potential for significant improvement of the quality of remote healthcare. This paper discusses the use of MySignals HW shield which is a hardware development platform for medical devices to build e-health monitoring system. Wearable health monitoring system prototype has been developed in this work. To conduct experiments, health vitals such as body temperature, ECG, oxygen saturation level, and pulse rate from 5 volunteers have been measured, collected, and stored in a cloud database using the system prototype. To evaluate the performance of the prototype, transmission delay has been recorded in both wired (Ethernet) and wireless (Wi-Fi) communication modes. It is observed that it takes 2.71 ms and 5.18 ms of time to collect and store the health vitals to the cloud database in wired and wireless mode respectively. Comparing the collected health vitals with the normal range of health vitals, no abnormality is found in all volunteer's health. Finally, a framework for contactless monitoring of COVID-affected patients is proposed. Contactless monitoring of health vitals can reduce the chance of community spread.