Siemens Aktiengesellschaft

Andreas Furch

Rainer Falk

Hendrik Brockhaus

Kay-Christian Wondollek

Steffen Fries

Daniel Schneider

Kai Fischer

Hans Aschauer

Markus Heintel

Johannes Zwanzger

Fabrizio De Santis

Thomas Zeschg

Tolga Sel

Niranjana Papagudi Subrahmanyam

Malek Safieh

Florian Wilde

Kai Arzdorf

Various embodiments of the teachings herein include a method for onboarding an IoT device () of a manufacturer, in a manner secure against quantum computer attacks, in an infrastructure of a customer by means of a first server () of a manufacturer domain of the manufacturer and a second server () of a customer domain of the customer. In some embodiments, three authenticated and encrypted communication channels and a key encapsulation method are used to provide a device certificate of the customer domain for the IoT device on the IoT device.

Method and system for onboarding an IoT device

Provided is a method for transmitting data packets over a network from a sender to a receiver via a communication link consisting of at least one transmission section, via which the data packet is transmitted from a sender node to a receiver node, the method having the following steps for at least one transmission section: first security information, which includes information about a cryptographic protective function used in the transmission of the data packet via an adjacent transmission section, is assigned to the data packet by the sender node, the data packet having the assigned security information is transmitted to the receiver node of the transmission section, the security information is checked in the receiver node against a preset guideline, and at least one measure is provided in accordance with the result of the check.

Method for transmitting data packets

In order to grant an access to a computer-based object, a memory card having a program code processor is provided, on which at least one public and private key assigned to the memory card are stored. In addition, an item of license information is provided, which comprises at least one license code encrypted by means of the public key assigned to the memory card, on a computing device which controls the access to the computer-based object.

Granting an access to a computer-based object

Disclosed is a memory card comprising a program code processor for granting access to a computer-based object, at least one public and private key that is allocated to the memory card as well as a public key of a trustworthy entity being stored on said memory card. Furthermore, a piece of license information comprising at least one license code which is encoded by means of the public key allocated to the memory card is provided on an arithmetic unit that controls access to the computer-based object.

Granting access to a computer-based object

Growing community of inventors

Freising, Germany

Andreas Furch