Unify Gmbh Co. Kg

Siemens Aktiengesellschaft

Continental Automotive Gmbh

Siemens Enterprise Communications Gmbh & Co. Kg

Nokia Siemens Networks Gmbh & Co Kg

Florian Kohlmayer

Rainer Falk

Andreas Köpf

Andreas KÖPF

The invention relates to a method for providing a wireless local network, wherein stationary communication devices and mobile communication devices are connected in the manner of a mesh as the sub-network, which is particularly connected to an infrastructure network and configured to exchange authentication messages with at least one communication device, which is particularly disposed in the infrastructure network and provides an authentication function. During an attempt to establish a first link by a first communication device connected to a communication device providing the authentication function to a second communication device connected to the communication device providing the authentication function, an authenticator role to be assigned as part of an authentication process is associated with the first and second communication devices, wherein at least one property correlating with the connection is analyzed for meeting a criterion. The invention further relates to an arrangement comprising means for carrying out the method.

Method and arrangement for providing a wireless mesh network

A method and an arrangement for providing a wire-free mesh network are provided. An approval procedure is carried out in situations in which a subscriber who is registering on the mesh network transmits an MAC address which already exists in the mesh network, such that two different subscribers within the mesh network never have identical MAC addresses.

The embodiments relate to a near field communication system including a plurality of near field communication devices which communicate with each other via a radio interface. During generation of a common cryptographic key between the near field communication devices of the near field communication system, at least one of the two near field communication devices monitors during generation of the cryptographic key via the radio interface in a generation period whether an additional near field communication device which could be a potential active attacker communicates with one of the near field communication devices via the radio interface. If such a suspicious type of communication is detected, generation of the common cryptographic key is optionally terminated.

Method and system for the manipulation-protected generation of a cryptographic key

The invention relates to a method for providing a wireless local network, wherein stationary communication devices and mobile communication devices are connected in the manner of a mesh as the sub-network, which is particularly connected to an infrastructure network and configured such that it can exchange authentication messages with at least one communication device, which is particularly disposed in the infrastructure network and provides an authentication function. During an attempt to establish a first link by a first communication device connected to a communication device providing the authentication function to a second communication device connected to the communication device providing the authentication function, an authenticator role to be assigned as part of an authentication process is associated with the first and second communication devices, wherein at least one property correlating with the connection is analyzed for meeting a criterion. The invention further relates to an arrangement comprising means for carrying out the method.

Method for providing a mesh key which can be used to encrypt messages between a first node and a second node of a mesh network, wherein a session key is generated when authenticating the first node in an authentication server, the first node and the authentication server or an authentication proxy server using a predefined key derivation function to derive the mesh key from said session key, which mesh key is transmitted to the second node.

Method and system for providing a mesh key

In a system () for transmitting RFID identifiers, which can be read from RFID tags (), to an authentication server (), at least one RFID protocol message, which is encoded in authentication messages, can be transmitted from an RFID reading unit (A) to the authentication server ().

Device and method for providing RFID identification data for an authentication server

A message processing device for processing messages has at least one reception buffer, a message includes at least one authentication element and one message content. The message is received and stored in the reception buffer. A characteristic variable of a priority for security checking of the message is determined as a function of the message content. A processing sequence for further message processing for the security checking, taking into account the at least one authentication element of the messages in the reception buffer is defined and carried out as a function of the characteristic variable.

Method for processing messages and message processing device

In a method for the access control to an automation unit (), access rights predetermined by the access control are dependant on the operating state of the automation unit (), wherein at least during an emergency, expanded access rights in relation to normal operation are granted independently of the access rights during normal operation.

Method for the access control to an automation unit

A device for authorizing an online service during driving in a vehicle. Contents of an online service are authorized according to the vehicle state. The device includes an electronic control unit, a graphical output apparatus, and a communication interface. A system that includes the device and a server, which is not located in the vehicle and which is connected to the communication interface through a wireless connection for the exchange of data. A method, having the following steps: the vehicle state of the vehicle is detected. According to the vehicle state, it is checked if a requested online service or certain contents of a requested online service are authorized for display during driving. According to available or ascertainable data on the ability of the requested online service to be authorized during driving, the requested online service is either blocked or authorized in a limited or complete manner. The result is depicted on the graphical output apparatus.

Device, system, and method for authorizing vehicle online services during driving

A method and an arrangement are provided wherein a newly added mesh node does not require a link to the AAA server for the purpose of authentication. Authentication is carried out using a node which is already present in the mesh network and which has a link to the AAA server.

In a method for protecting at least parts of product data, which are stored on at least one server and/or in at least one database and associated with a product identified by an RFID tag, from unauthorized access, an authentication and authorization check of an accessing party is performed upon access to a server and/or database, additionally proof being required upon access that the product is located within the discretionary area of the accessing party, the proof being provided by the RFID tag upon detection by an RFID reader by an access token in the form of a data structure, by which the RFID tag authorizes the accessing party to access at least parts of the product data associated with the product identified by the RFID tag, and stored on the server and/or in the database, wherein the product data can be queried and/or changed depending on the application.

Growing community of inventors

Starnberg, Germany

Florian Kohlmayer