Methods, devices and system for the security-protected provision of sets of data
AssigneeSiemens Aktiengesellschaft
InventorThomas Jetzfellner
Life of this patent
Estimating the term…
Abstract
An ecosystem of devices that autonomously interact with one another by a blockchain is provided, to create a security-protected data processing of sensor data or measurement data for an object by a blockchain infrastructure. Fields of application include supply-chain scenarios or industrial control applications of blockchains.
Claims27
A device for calculating a cryptographic checksum for a data structure, comprising:
- a capture module of an object by a capture device;
- a calculation module for calculating an object-specific characteristic on a basis of the individual features;
- a cryptography module for providing a first cryptographic key on a basis of the individual features and/or the object-specific characteristic;
- and
- a protection module for cryptographically protecting a data structure by a cryptographic checksum, wherein the protection module calculates the cryptographic checksum by means of the first cryptographic key.
A verification device for verifying a cryptographic checksum of a data structure, comprising:
- a reception module for receiving a data structure, wherein the data structure is protected by a cryptographic checksum;
- a capture module for capturing individual features of an object by a capture device;
- a calculation module for calculating an object-specific characteristic on a basis of the individual features;
- a cryptography module for providing a first cryptographic key on a basis of the individual features and/or the object-specific characteristic;
- and
- a verification module for verifying the cryptographic checksum by the first cryptographic key.
A write control module, comprising:
- a communication interface for transferring messages, wherein the messages are transferred to a distributed database system;
- a verification module, wherein:
- the verification module loads a data write configuration that specifies conditions under which the messages are written to the distributed database system,
- the verification module verifies whether the conditions for writing the messages to the distributed database system are met;
- a transfer control module, wherein:
- the transfer control module controls a transfer of a message to the distributed database system by the communication interface on a basis of a check result of the verification module.
A transmission apparatus for controlling a transmission of a message, comprising:
- a message data capture module, wherein
- the message data capture module reads a priority data record with a priority from a message,
- the message data capture module reads a destination of the message,
- the priority is assigned transmission parameters for the message transmission;
- a determination module, wherein
- the determination module generates a message control data record for controlling the transfer of the message on a basis of the destination and the priority,
- the message control data record is assigned to the message,
- a transfer module, wherein
- the transfer module transmits the message to a node of a distributed database system depending on the message control data record,
- the node is specified by the message control data record.
A system, comprising:
- a generation module for generating messages for an object, wherein the message for example comprises a priority data record with a priority and a data structure;
- a device for calculating a cryptographic checksum for the data structure, comprising:
- a capture module of the object by means of a capture device;
- a calculation module for calculating an object-specific characteristic on a basis of the individual features;
- a cryptography module for providing a cryptographic key on a basis of the individual features and/or the object-specific characteristic;
- a protection module for cryptographically protecting the data structure by a cryptographic checksum, wherein the protection module calculates the cryptographic checksum by the cryptographic key;
- a write control module, comprising:
- a communication interface for transferring messages, wherein the messages are transferred to a distributed database system;
- a verification module, wherein
- the verification module loads a data write configuration that specifies conditions under which the messages are written to the distributed database system,
- the verification module verifies whether the conditions for writing the messages to the distributed database system are met;
- a transfer control module, wherein
- the transfer control module controls a transfer of a message to the distributed database system by the communication interface on a basis of a check result of the verification module,
- a transmission apparatus for controlling a transmission of the message via a plurality of nodes, comprising:
- a message data capture module, wherein
- the message data capture module reads a priority data record with a priority from a message,
- the message data capture module reads a destination of the message,
- the priority is assigned transmission parameters for the message transmission;
- a determination module, wherein
- the determination module generates a message control data record for controlling the transfer of the message on the basis of the destination and the priority,
- the message control data record is assigned to the message,
- a transfer module, wherein
- the transfer module transmits the message to a node of a distributed database system depending on the message control data record,
- the node is specified by the message control data record,
- the communication interface transmits a message by the transmission apparatus.
A method of computer-aided calculation of a cryptographic checksum, the method comprising:
- capturing individual features of an object by a capture device;
- calculating an object-specific characteristic on a basis of the individual features;
- providing a first cryptographic key on a basis of the individual features and/or the object-specific characteristic;
- and
- cryptographically protecting a data structure by a cryptographic checksum, wherein the cryptographic checksum is calculated by the first cryptographic key.
A method of computer-aided verification of a cryptographic checksum, the method comprising:
- receiving a data structure, wherein the data structure is protected by a cryptographic checksum;
- capturing individual features of an object by a capture device;
- calculating an object-specific characteristic on a basis of the individual features;
- providing a first cryptographic key on a basis of the individual features and/or the object-specific characteristic;
- and
- verifying the cryptographic checksum by the first cryptographic key.
A method of computer-aided control of a data transfer, the method comprising:
- transferring messages, wherein the messages are transferred to a distributed database system;
- verifying a data write configuration, wherein:
- the data write configuration specifies conditions under which the messages are written to the distributed database system,
- verifying whether the conditions for writing the messages to the distributed database system are met;
- transferring the messages to a distributed database system by a communication interface, wherein:
- the transfer is controlled on a basis of a check result of verifying the data write configuration.
A method of computer-aided control of a transmission of messages via a plurality of nodes, the method comprising:
- reading a message of a priority data record with a priority of a message, wherein:
- a destination of the message is read,
- the priority is assigned transmission parameters for the message transmission;
- determining a message control data record for controlling the transfer of the message on a basis of the priority and the destination, wherein:
- the message control data record is assigned to the message,
- transmitting the message to a node of a distributed database system depending on the message control data record, wherein:
- the node is specified by the message control data record.
Dependencies are inferred from the claim text.