Distributed processing of a product on the basis of centrally encrypted stored data

A method for creating a product data the for storing product data by a production station on a product data server of a system for processing the product data,

• the system including:
• the product data server configured to store the product data file, wherein the data file comprises the product data encrypted with a document key,
• a product,
• a tag, attached to the product, configured to store access information that provides access to the product data file stored on the product data server, an asymmetric key pair that comprises a private tag key and a public tag key, and an encryption device,
• the production station configured to process the product according to the product data and store an asymmetric key pair that comprises a public station key and a private station key, wherein the private tag key is inaccessible to the production station,
• the method comprising the steps:
• supplying the product data at the production station;
• by the production station, generating or supplying the document key;
• by the production station, encrypting at least the product data with the document key into encrypted product data;
• by the production station, reading out the public tag key from the tag;
• by the production station, encrypting the document key in the product data file on the product data server with the public tag key into an encrypted document key;
• by the production station, generating the product data file comprising the encrypted product data and the encrypted document key,
• wherein upon receiving the encrypted document key and the public station key from the production station, the tag
• decrypts the encrypted document key with the private tag key to obtain a decrypted document key,
• newly encrypts the decrypted document key with the public station key obtained from the production station to obtain a re-encrypted document key, and
• provides the re-encrypted document key to the production station.

A method for storing a product data the at a production station of a system for processing product data,

• the system including:
• a product data server configured to store the product data file, wherein the product data the comprises the product data encrypted with a document key,
• a product,
• a tag, attached to the product, configured to store access information that provides access to the product data file stored on the product data server, an asymmetric key pair that comprises a private tag key and a public tag key, and an encryption device,
• the production station configured to process the product according to the product data and store an asymmetric key pair that comprises a public station key and a private station key, wherein the private tag key is inaccessible to the production station,
• the method comprising:
• supplying the product data at the production station;
• by the production station, generating or supplying the document key;
• by the production station, encrypting at least the product data with the document key into encrypted product data;
• by the production station, reading out the public tag key from the tag;
• by the production station, encrypting the document key in the product data the on the product data server with the public tag key into an encrypted document key;
• by the production station, generating a product data the comprising the encrypted product data and the encrypted document key;
• by the production station, sending the product data the to the product data server;
• storing, at the product data server, the product data file;
• by the product data server, generating the access information for the stored product data file;
• by the product data server, sending the access information to the production station;
• by the production station, sending the access information to the tag;
• storing at the tag, the access information;
• and
• wherein upon receiving the encrypted document key and the public station key from the production station, the tag is configured to
• decrypt the encrypted document key with the private tag key to obtain a decrypted document key,
• newly encrypt the decrypted document key with the public station key obtained from the production station to obtain a re-encrypted document key, and
• provide the re-encrypted document key to the production station.

A method for reading out encrypted product data by a production station of a system for processing product data,

• the system including:
• a product data server configured to store a product data file, wherein the product data file comprises the product data encrypted with a document key,
• a product,
• a tag, attached to the product, configured to store access information that provides access to the product data file stored on the product data server, an asymmetric key pair that comprises a private tag key and a public tag key, and an encryption device,
• the production station configured to process the product according to the product data and store an asymmetric key pair that comprises a public station key and a private station key, wherein the private tag key is inaccessible to the product station,
• the method comprising the steps:
• by the production station, reading out the access information from the tag;
• by the production station, while employing the access information read out from the tag, reading out the product data file, comprising the encrypted product data and the encrypted document key, from the product data server,
• wherein upon receiving the encrypted document key and the public station key from the production station, the tag
• decrypts the encrypted document key with the private tag key to obtain a decrypted document key,
• newly encrypts the decrypted document key with the public station key obtained from the production station to obtain a re-encrypted document key, and
• provides the re-encrypted document key to the production station.

A method for encrypting encrypted product data by a production station of a system for processing product data,

• the system including:
• a product data server configured to store a product data file, wherein the product data file comprises the product data encrypted with a document key,
• a product,
• a tag, attached to the product, configured to access information the provides access to the product data file stored on the product data server, an asymmetric key pair that comprises a private tag key and a public tag key, and an encryption device, the production station the product according to the product data and store an asymmetric key pair that comprises a public station key and a private station key, wherein the private tag key is inaccessible to the production station,
• wherein encrypting encrypted product data by the production station includes reading out encrypted product data by the production station, reading out the access information from the tag, and by the production station, while employing the access information read out from the tag, reading out the product data file, including the encrypted product data and an encrypted document key, from the product data server
• the method comprising the steps:
• by the production station, transferring the encrypted document key and the public station key to the tag;
• by the tag, receiving the encrypted document key and the public station key from the production station;
• by the tag, decrypting the encrypted document key with the private tag key to obtain a decrypted document key;
• by the tag, re-encrypting the document key from the public tag key to the public station key into a re-encrypted document key;
• by the tag, sending the re-encrypted document key to the production station;
• by the production station, decrypting the re-encrypted document key with the private station key;
• by the production station, decrypting the encrypted product data with the document key into plaintext product data.

A tag device, configured to be attached to a product, the tag device configured to enable a production station to process, including storing and reading out, encrypted product data from a product data server to the production station;

• wherein the product data server is configured to store a product data file, wherein the product data the comprises:
• product data encrypted with a document key, and
• the document key encrypted with a public tag key of an asymmetric key pair;
• wherein in the tag device is configured to store access information that provides access to the product data the stored on the product data server;
• wherein
• the asymmetric key pair is stored in the tag device, comprising a private tag key and the public tag key, wherein the private tag key is inaccessible to the production station;
• wherein the tag device includes an encryption device, and
• wherein upon receiving the encrypted document key and a public station key from the production station, the tag is configured to
• decrypt the encrypted document key with the private tag key to obtain a decrypted document key,
• newly encrypt the decrypted document key with the public station key obtained from the production station to obtain a re-encrypted document key, and
• provide the re-encrypted document key to the production station.