Tamperproof regulation of a process, production, and actuating installation

A recording and actuating apparatus for an installation component of at least one of a process, production, and actuating installation, the recording and actuating apparatus comprising:

• a recorder configured to form an observation data record describing a current state of the installation component from at least one of measurement data and state parameters in accordance with a predetermined control algorithm;
• a transmitter configured to transmit the observation data record to a central control apparatus via a field bus, and to receive an associated actuating data record from the central control apparatus via the field bus;
• and
• an actuator configured to deliver at least one actuating signal to an actuator of the installation component based on the actuating associated data record;
• wherein the recorder is further configured to encrypt the observation data record before transmission to the central control apparatus using an encryption method which is unknown to the central control apparatus in connection with the predetermined control algorithm via a useful encryption method;
• wherein the actuator is further configured to decrypt the actuating data record, before generating the at least one actuating signal, using a decryption method corresponding to the useful encryption method;
• and
• wherein, in order to encrypt at least one observation data record to be transmitted, the recorder transmits not only true, actual observation data but additionally a further partial data record containing false observation data in the observation data record.

A central control apparatus for regulating installation components of at least one of a process, production, and actuating installation, the central control apparatus comprising:

• a transmitter configured to receive, via an encryption method unknown to the central control apparatus, observation data records encrypted in a recorder via a useful encryption method over a field bus, and configured to transmit associated encrypted actuating data records formed in accordance with a predetermined control algorithm from the encrypted observation data records;
• and
• a processor configured to generate the associated encrypted actuating data records from the encrypted observation data records without decrypting the encrypted observation data records;
• wherein the encrypted actuating data records are generated using a predefined regulation algorithm which is formed from a standard regulation algorithm such that the decryption of the encrypted actuating data records yields the same result as if the encrypted observation data records had first been decrypted and the decrypted observation data records had then been processed using the standard regulation algorithm;
• wherein not only true, actual observation data but additionally a further partial data record containing false observation data in a respective observation data record are received from the recorder.