Back to results
US 8,635,709 B2Granted
Method for operating an installation using data protected against unauthorized use
AssigneeSiemens Aktiengesellschaft
InventorsJorge Cuellar, Hans-Georg Köpken, Matthias Lenord, Monika Maidl
Life of this patent
Estimating the term…
Abstract
A method and a device for operating a technical installation using data from a third party are provided, the data being protected against unauthorized use. A first and a second rights object are used for protecting the data, the first rights object specifying an authorized use of the data with a variable not defined in respect of its value and the second rights object defining a value for the variable.
Claims17
A method for operating a technical installation using data provided by a third party, the data being protected against unauthorized use, comprising:
- receiving data provided by the third party along with a first rights object and separately receiving a second rights object, the first and second rights objects for protecting the data,
- wherein the first rights object specifies an authorized use of the data except for at least one variable not defined in respect to its value such that the first rights object comprises an incomplete definition by missing a value for the at least one variable;
- and
- wherein the second rights object separately provides the value for the variable not defined in the first rights object in order to provide a full definition and to enable the authorized use;
- and
- wherein a relationship between the first rights object and the second rights object comprises a reference to the variable using an identifier for both rights objects;
- processing the first rights object and the second rights object by a processor by evaluating the identifier to recognize that the second rights object belongs to the first rights object and then replacing the variable in the first rights object with the value provided by the second rights object such that a combination of the first rights object and the value from the second rights object results in the full definition to enable the authorized use;
- generating a derived rights object from the combination that authorizes use of the data and defines a scope of use for the data with the full definition;
- providing access to the data by a service provider in accordance with the defined scope;
- and
- forwarding the data and the derived rights object by the service provider to one or more facilities according to forwarding rules for processing the data according to specification in the full definition.
8 more elements
A device for executing a method for operating a technical installation using data provided by a third party, the data being protected against unauthorized use, the device comprising:
- receiving functionality for receiving data provided by the third party along with a first rights object and separately receiving a second rights object for protecting the data,
- wherein the first rights object specifies an authorized use of the data except for at least one variable not defined in respect to its value such that the first rights object comprises an incomplete definition by missing a value for the at least one variable;
- and
- wherein the second rights object separately provides the value for the variable not defined in the first rights object in order to provide a full definition and to enable the authorized use;
- and
- wherein a relationship between the first rights object and the second rights object comprises a reference to the variable using an identifier for both rights objects;
- a processor adapted to provide processing functionality for evaluating and processing the received rights objects,
- wherein the processor
- evaluates the identifier to recognize that the second rights object belongs to the first rights object;
- combines information encompassed by the two rights objects by replacing the variable in the first rights object with the value provided by the second rights object such that a combination of the first rights object and the value from the second rights object results in the full definition to enable the authorized use,
- generates a derived rights object from the combination that authorizes use of the data and defines a scope of use for the data with the full definition,
- provides access to the data by a service provider in accordance with the defined scope;
- and
- rights management functionality for forwarding the data and the derived rights object by the service provider over a communication link to one or more facilities according to forwarding rules for processing the data according to a specification in the full definition.
11 more elements
A non-transitory computer readable medium storing a computer program for executing a method for operating a technical installation using data provided by a third party and protected against unauthorized use, the method comprising:
- receiving data provided by the third party along with a first rights object and separately receiving a second rights object for protecting the data,
- wherein the first rights object specifies an authorized use of the data except for at least one variable not defined in respect ti its value such that the first rights object comprises an incomplete definition by missing a value for the at least one variable;
- and
- wherein the second rights object separately provides the value for the variable not defined in the first rights object in order to provide a full definition and to enable the authorized use;
- and
- wherein a relationship between the first rights object and the second rights object comprises a reference to the variable using an identifier for both rights objects;
- processing the first rights object and the second rights object by a processor by evaluating the identifier to recognize that the second rights object belongs to the first rights object and then replacing the variable in the first rights object with the value provided by the second rights object such that a combination of the first rights object and the value from the second rights object results in the full definition to enable the authorized use;
- generating a derived rights object from the combination that authorizes use of the data and defines a scope of use for the data with the full definition;
- providing access to the data by a service provider in accordance with the defined scope;
- and
- forwarding the data and the derived rights object by the service provider to one or more facilities according to forwarding rules for processing the data according to a specification in the full definition.
8 more elements
Dependencies are inferred from the claim text.