Siemens Aktiengesellschaft

Joachim Koppers

Rainer Falk

Steffen Fries

Kai Fischer

Hans Aschauer

Markus Heintel

Wolfgang Klasen

Johannes Zwanzger

Georg Trummer

Michael Kasper

Axel Pfau

Anton Sebastian Huber

Karl Glas

Franz Sperl

Andreas Köpke

Bernhard Quendt

Ralph Büsgen

A modular security control device for controlling an apparatus or an installation includes a basic control apparatus which is configured such that an apparatus or an installation which is at least connectable to the basic control apparatus is at least controllable via a sequence of a control program in the basic control apparatus, and includes a security module which is configured to provide or perform a cryptographic functionality for the basic control apparatus, where the security module is connected to the basic control apparatus by a data connection via a data interface, the basic control apparatus is configured to interact with the security module to achieve a security function of the security control device, and where the basic control apparatus is configured to query an identity and/or authenticity of the security module.

Modular security control device

The invention relates to an automation network and to automation equipment, network components and field devices for an automation network of this type. The network components transmit messages concerning their status to the automation equipment by means of a communication mechanism that functions according to field communication automation technology. Said automation equipment receives the status messages, evaluates them, monitors the operation of the network and controls said operation using the status messages. As the automation equipment thus contains the complete picture of the process and the network, it can react directly and rapidly to problems of the network. This eliminates the need, for example, for an additional SNMP/OPC server or a network management station.

Automation network comprising network components that produce status messages

A method for secure data transfer in an automation network wherein the method comprises authenticating a user by a program invocation rights system aided by user data for approving a use of the program invocation by the user, encrypting and signing data by the program invocation, were the data contains the user data. The method also includes transferring the data by a transfer medium from the program invocation to the subassembly, decrypting the data in the subassembly, authenticating the program invocation associated with the subassembly, and authenticating the user by the subassembly rights system aided by the user data.

Secure data transfer in an automation network

Growing community of inventors

Forchheim, Germany

Joachim Koppers