Robert Boschgmbh

Jan Zibuschka

Ralph Retter

Stefan Schmid

Paulius Duplys

Jamshid Shokrollahi

Hans Loehr

David Foerster

Antonios Karatzoglou

Christian Zimmermann

Robert Szerwinski

Joao P Sousa

Michael Dorna

Sebastian Schuster

Oliver Rogalla

Rishabh Gulati

A method for updating a software component. The method includes providing a first electronic device and a second electronic device that are connected in a first network, receiving update information for the second electronic device via the first electronic device, the update information being provided with a signature that is generated with the aid of a post-quantum algorithm (PQA) signature, checking the update information by validating the signature by the first electronic device, relaying the update information to the second electronic device if the update information is deemed to be valid, and updating a software component of the second electronic device using the update information.

Techniques for updating a software component

A method in which user information is transmitted from at least one data source to a processing unit of a learning device. The user information is used, by the processing unit via a machine learner, to generate at least one user model. The at least one user model is adapted via an adaptation of parameters used by the at least one machine learner to generating the at least one user model. The parameters, used by the at least one machine learner for generating the at least one user model, are adapted as a function of at least one predefined rule. The user model generated on the basis of the adapted parameters is used to personalize at least one terminal.

Method for controlling user information in an automatically learning device

A method, a data protection module and a network system for protecting data of an electronic device, on which sensitive data are recorded or supplied; the sensitive data being processed by external services, in particular, Internet services. The data protection module is used for automatically computing data protection configurations for the device on the basis of device metadata and service metadata.

Data protection configuration for electronic devices in a network

A system and method for a client computer for the local composition of a data page having personal user data for services accessed by the user and provided on a number of servers. The method includes: setting up a central access server from among the servers; setting up a query for the composition of the data page, for a transmission from the client computer to the central access server; receiving a processing element, which includes a visual element and access addresses to the servers that are relevant for the query, the processing element including control commands processed by the client computer, and queries of the client computer to the access addresses included in the processing element being coordinated so that the personal user data on the servers to be aggregated for the composition of the data page are delivered directly to the client computer for the local composition.

Transparency mechanism for the local composition of personal user data stored in a distributed fashion

A method for managing personal data stored in a distributed system, in which the personal data are transmitted from a terminal device to at least one network node; and in which there is furnished to the user, by the distributed system, a user interface by way of which the personal data are to be managed in respective network nodes of the distributed system which manage the personal data; and in which management instructions furnished via the user interface, for managing the personal data within the distributed system, are transmitted via a predefined interface that is configured at least on the respective network nodes of the distributed system which manage the personal data.

Method for managing personal data in a distributed system

A server application, in particular an electronic marketplace for access by a user to information, data, and/or services that are provided by at least one provider as an offering in the server application. The server application is configured for checking the plausibility of the privacy statements based on a comparison of privacy statements for the information, the data, and/or the service to data protection-relevant metainformation of the associated offering.

Server application and method for checking the plausibility of privacy statements

A method for processing user information detected by at least one detection device of a device, in which information concerning at least one user detected by the at least one detection device is transmitted to a number of databases, and in which the information detected by the at least one detection device is at least partially associated with a user profile, and in which all information stored on the number of databases which has been detected by the at least one detection device and associated with the user profile is retrieved from the number of databases, and as a function of a result of an authentication of the user is output to the user on at least one output unit for processing.

Method for processing user information detected by at least one detection device of a system

A method for protecting a device from information attacks, in which received from the at least one device are checked by a security device, included in the at least one device, for an information attack, and for the case that the received data are associated with an information attack, characteristic data concerning the information attack are stored in the at least one device and transmitted via a communication interface to a unit in communicative connection with a plurality of devices, and the unit evaluates the characteristic data transmitted from the at least one device and outputs a warning message to at least a portion of the devices in communicative connection with the unit as a function of at least one predefined criterion.

Method for transmitting data

A method and a device for manipulation protection, including receiving a first data packet sent from a first device by a second device, the first data packet including a first time-variant parameter; signing a concatenation of a first hash value with the first time-variant parameter and an identification of the second device with the aid of a private key of an asymmetric encryption method which is assigned to the second device, program instructions or data, which are stored on the second device and provided to be carried out during the operation of the second device, being used to determine the hash value; generating a second data packet including the signature and the concatenation; and sending the second data packet from the second device to the first device.

Method for manipulation protection

A method of operating a first device in group of devices in a network is disclosed. The method comprises encrypting and decrypting, with a processor of the first device, communications with other devices in the group of devices using a shared key that is stored in a memory of each device in the group of devices; receiving, with a transceiver of the first device, a first message from a second device in the group of devices, the first message indicating that the first device is authorized to share the shared key; and transmitting, with the first device, the shared key to a third device in the network that is not in the first group of devices only after receiving the first message indicating that the first device is authorized to share the shared key.

Device and method for providing user-configured trust domains

A method is described for processing of user-specific data in a vehicle; in particular, the processing of user-specific data in control systems of a vehicle, such as a navigation system or an entertainment system, for example. For this purpose, the device for processing user-specific data is expanded by a private operating mode. In this private operating mode, there is no persistent storage of user inputs and/or the resulting processing results. After termination of the newly created private operating mode, the data stored during the private operating mode are deleted immediately.

Device and method for processing user-specific data from a vehicle

A method for excluding a participant from a group of multiple participants, in which certificates are used for an authorized communication of the participants among each other, a withdrawal request being received by one participant of the group, the withdrawal request making an identification of the participant to be excluded possible by the participant to be excluded itself, and the authorized communication being terminated by the participant when it is identifiable as the participant to be excluded based on the withdrawal request, as well as a communication system for carrying it out.

Method for excluding a participant from a group having authorized communication

For communication of a first participant with at least one additional participant in a communication system via multiple protocols, the protocols using at least two different certificate formats, the first participant uses different certificates with the respective certificate formats for the communication via the different protocols, the different certificates being based on a shared public key. The first participant holds a shared associated private key for the different certificates. Provision of the certificates for the first participant includes generating the public key and the associated private key, signing the public key for provision of the first certificate, and signing the public key for provision of the second certificate.

Reduction of memory requirement for cryptographic keys

A method for safeguarding a network made up of at least one first device and one second device. The first device derives a first challenge from physical properties of a first communication channel between the first device and the third device. In addition, the first device transmits the first challenge to the second device via a second communication channel between the first device and the second device. The first device receives a first response, corresponding to the first challenge, from the third device via the first communication channel and receives a second response, corresponding to the first challenge, from the second device via the second communication channel. The first device compares the first response and the second response to one another to verify that the second device is communicating with the third device.

Growing community of inventors

Magstadt, Germany

Jan Zibuschka