Siemens Aktiengesellschaft

Siemens Mobility Gmbh

Siemens Enterprise Communications Gmbh & Co. Kg

III Holdings 12, LLC

Jens-Uwe Busser

Rainer Falk

Steffen Fries

Kai Fischer

Jorge Cuellar

Hendrik Brockhaus

Wolfgang Klasen

Angela Schattleitner

Uwe Blöcher

Dominik Merli

Michael Munzert

Heiko Patzlaff

Markus Böhm

Jan Stijohann

Volker Fusenig

Christof Störmann

Jan Kästner

Various embodiments include a method for providing a proof of origin for a digital key pair comprising: generating the digital key pair at an origin specified by a device, wherein the origin comprises a security module of the device, wherein the digital key pair includes a private key stored in the security module protected against access; and providing the proof of origin confirming generation of the digital key pair at the origin, wherein the proof of origin is protected by a secret key provided by the device, wherein the secret key is stored in the security module; and issuing the public key of the digital key pair together with the proof of origin.

Providing a proof of origin for a digital key pair

A method for managing access to a device, which has a first and a second input interface, each for inputting a character string, including the steps of: generating a password having a prescribed minimum number of characters and having a measure of complexity; generating a subpassword on the basis of the generated password and a prescribed mapping specification, wherein the subpassword has a lower measure of complexity than the password; and enabling access to the device if a character string input via the first input interface corresponds to the password or a character string input via the second input interface corresponds to the subpassword. The method and a corresponding access system for a device permit simple handling of the password management by the respective user is also provided.

Method for managing access to a device, and access system

A method and system for providing a plurality of tamperproof digital certificates for a plurality of public keys of a device by a certification authority wherein a respective signing request for requesting a digital certificate is initially created for each of a plurality of public keys, where the signing request for the ith public key is signed using the jth private key in accordance with a signing rule, the jth private key being dissimilar to the ith private key belonging to the ith public key, and wherein all signing requests are transmitted to the same certification authority in each case, and each signing request is verified in the certification authority, in which case a check is performed to determine whether the ith signing request has been signed using the jth private key in accordance with the signing rule.

Method and system for providing a plurality of tamperproof digital certificates for a plurality of public keys of a device

A method for monitoring and controlling, industrial or building automation to detect anomalies in a control network, wherein a technology of an intrusion detection system (IDS) is configured to analyze a time sequence and time intervals of correct messages in the network traffic and to use the messages to train an anomaly detection system. Detecting a time sequence and a rhythm of correct messages allows for the detection of malfunctions or manipulations of devices and attacks that are performed using regular monitoring or control stations that have been taken over by attackers or that are defect, and that cannot be detected using content-based methods or by a considerable increase of data traffic. An additional security barrier is thus provided that can continue monitoring and protecting a technical unit from possible acts of sabotage, even if the control network of the technical unit has already been corrupted.

Method for detecting anomalies in a control network

A device for transcoding during an encryption-based access check of a client device to a databank, which provides a data set in an encrypted area, has: a unit for assigning a specific access level of the client device and for providing a corresponding first group key of the client device as a function of a registration parameter, wherein the client device is allowed access to a first area, which is encrypted using the first group key, and all areas of the database subordinate to the first area as a function of the assigned access level; a unit for providing a classification result depending on a classification of the data set of the particular area by one of the client devices allowed to access the particular area; and a unit for transcoding the data set and/or a data set key for the data set as a function of the classification result.

Method and device for transcoding during an encryption-based access check on a database

A method and a server are configured to provide, in a tamperproof manner, a key certificate for a public device key of a user device, which is installed for a user, by means of a server belonging to a service provider who provides the user with a service via the user device, wherein the server provides the user device with the key certificate if a signing request message received by the user device is successfully verified by the server using a one-time password generated for the user device by the server.

Method and apparatus for providing a key certificate in a tamperproof manner

In a method for providing a one-time password for a user device belonging to a user, which password is intended to register the user device with a server, the server generates the one-time password using a cryptographic operation on the basis of a unique use identifier and transmits the password to the user device. The method provides a service provider with the possibility of tying additional conditions for registration to the one-time password and thus increases the flexibility of the service provider when configuring the services offered by the latter and increases security against manipulation.

Method and apparatus for providing a one-time password

In a method for issuing a digital certificate by a certification authority (B), a device (A) sends a request message to the certification authority (B) for issuing the certificate, the certification authority (B) receives the request message and sends a request for authenticating the device (A) to the device (A), the device (A) sends a response to the certification authority (B) in response to the received request, and the certification authority (B) checks the received response and generates the certificate and sends the certificate to the device (A), if the response was identified as correct.

Method for issuing a digital certificate by a certification authority, arrangement for performing the method, and computer system of a certification authority

Growing community of inventors

Munich, Germany

Jens-Uwe Busser