Systems and methods for digital authentication of usage data of an automation plant

A system, comprising:

• a first module configured to acquire automation plant-related data comprising operating data embodied as a time series, and to generate from the operating data manipulation-proof usage data in form of a series of time windows having a predetermined length;
• a second module configured to receive from the first module the manipulation-proof usage data and determine therefrom at least a part of the manipulation-proof usage data, to form a checksum from the at least one part of the manipulation-proof usage data, to transfer the checksum to at least one node of a distributed ledger network, and to store the manipulation-proof usage data in an area outside the distributed ledger network;
• and
• a third module participating in the distributed ledger network and configured to receive upon request the manipulation-proof usage data from the area outside the distributed ledger network, and to check the manipulation-proof usage data for correctness based on the checksum.

A method for checking usage data of an automation plant, said method comprising:

• acquiring with a first module automation plant-related data which comprise operating data embodied as a time series;
• generating with the first module from the operating data manipulation-proof, preferably digitally signed usage data in form of a series of time windows having a predetermined length;
• determining with a second module at least a part of the manipulation-proof usage data;
• forming with the second module a checksum from the at least one part of the manipulation-proof usage data;
• transferring the checksum with the second module to at least one node of a distributed ledger network;
• storing with the second module the manipulation-proof usage data in an area outside the distributed ledger network;
• issuing with a third module participating in the distributed ledger network a request to make available and verifying correctness of the manipulation-proof usage data from the preferably secure area and preferably providing information about which method was used to form the checksum;
• in response to the request, making the manipulation-proof usage data available to the third module from the preferably secure area for verifying its correctness, as well as preferably the information about the method that was used to form the checksum;
• and
• verifying with the third module the correctness of the manipulation-proof usage data based on the checksum.