Method and apparatus for securing real-time data transfer from a device

An apparatus operating as a data collector, the apparatus comprising a processor and memory including computer program code, wherein the memory and computer program code are configured to, with the processor, cause the apparatus to:

• obtain first data items from another apparatus;
• store the received first data items as a first group;
• obtain a secured data transmission from the another apparatus, the secured data transmission comprising third data;
• obtain from the third data at least second data;
• a hash;
• and a first signature;
• verify validity of the hash in comparison to the at least the second data;
• verify validity of the first signature at least in comparison to the hash;
• obtain a second group of data items from the second data;
• verify correctness of the first group of data items in comparison to the second group of data items;
• and
• determine the first group of data items as valid if each of the verifications were successful.

A method in an apparatus, comprising:

• receiving from a data source a plurality of data items;
• continually providing a data collector with the data items;
• buffering the first data items;
• generating by a root of trust circuitry a cryptographically verifiable integrity claim based on current hardware and software configuration of the apparatus;
• forming second data by combining at least the cryptographically verifiable integrity claim and an amount of the data items;
• forming a hash from at least the second data;
• obtaining a stamp;
• causing the root of trust circuitry to form a first signature from at least the hash;
• forming third data by combining at least the second data, the hash and the first signature;
• and
• providing the data collector with a secured transmission comprising the third data.

A method in a data collector, comprising:

• receiving information from an apparatus;
• storing information;
• obtaining continually data items from the apparatus;
• storing the received first data items as a first group;
• obtaining a secured data transmission from the apparatus, the secured data transmission comprising third data;
• obtaining from the third data at least second data;
• a hash;
• and a first signature;
• verifying validity of the hash in comparison to the at least the second data;
• verify validity of the first signature at least in comparison to the hash;
• obtaining a second group of data items from the second data;
• verifying correctness of the first group of data items in comparison to the second group of data items;
• and
• determining the first group of data items as valid if each of the verifications were successful.