Siemens Mobility Gmbh

Siemens Aktiengesellschaft

Martin Wimmer

Rainer Falk

Matthias Seifert

Hermann Seuschek

Uwe Blöcher

Heiko Patzlaff

Stefan Seltzsam

Christian Bauer

Leandro Pfleger De Aguiar

Omer Metel

David Hingos

Tiago Gasiba

Jens Reinert

Wen Wei Tang

Hans Aschauer

Jorge Cuellar

Michal Skubacz

Frank Aust

Matthias Lorenz

Christina Otto

Sebastian Ries

Achim Knebel

Jan Herrmann

A method for checking a license for the usage of at least one performance property in an Internet of things device, is provided, having the steps of —ascertaining at least one license condition for the usage of the performance property of the IoT device by at least one attribute contained in a license identifier, —transmitting and storing the license identifier, —checking the license condition by a) generating a pseudo-access which is assigned to the performance property using a pseudo-holding unit and b) checking an authorization for the pseudo-access by checking the attribute of the license identifier using a verification unit, and —activating the at least one performance property if the pseudo-access is confirmed, wherein the license identifier, the pseudo-holding unit, and the verification unit are designed based on a specification for verifiable credentials.

Checking a license for the usage of at least one performance property in an internet-of-things (IoT) device

A transmission device for transmitting data between a first network and a second includes: a first unidirectional transmission unit which is coupled to the first network and is configured to exclusively receive data transmitted from the first network to the transmission device, a second unidirectional transmission unit which is coupled to the second network and is configured to exclusively send data from the transmission device to the second network, and an identification unit which is located between the first unidirectional unit and the second unidirectional unit and which is configured to receive the data received by the first unidirectional transmission unit and to identify anomalies in the received data. The provided transmission device achieves the reliable, optimized identification of anomalies in the first network and increases security in the identification unit against manipulation and against attacks or intrusion attempts from the second network.

Transmission device for transmitting data

A method for securely transmitting time-critical data within a communication system that includes local networks each having a switch and a plurality of terminals, a controller that controls functions of switches and terminals, and having a control network assigned to the controller and separate from the local networks, where communication within the local networks is implicitly authorized based on an assignment of respective terminals to the same local network, each terminal is assigned a zero trust adapter that captures status information, transfers the status information via the control network to the controller for evaluation and authenticates the terminal to the controller to communication partners, and where the controller determines a trust index for each of the terminals based on the status information and applies rules dependent on the trust index for configuration or permissible communication relationships of the terminals.

Communication system, adapter for a terminal and method for securely transmitting time-critical data within the communication system

A transmission device for transmitting data between a first network and a second network is provided. The transmission device includes a first network port for coupling to the first network and a second network port for coupling to the second network, and the transmission device further includes: a first detection unit which is connected to the first network port and is configured to receive data transmitted by the first network via the first network port and to detect anomalies with respect to the received data, and a second detection unit which is connected to the second network port and is configured to receive data transmitted by the second network via the second network port and to detect anomalies with respect to the received data. The provided transmission device leads to an optimized detection of anomalies in the first and the second network, thereby increasing security during data transmission between the first and the second network.

Transmission device for transmitting data and detecting anomalies

An apparatus for monitoring a protected network using unidirectional communication includes a sending unit coupled to one or more devices of the protected network for obtaining network data related to protected network status. The apparatus further includes an eavesdropping unit with an interceptor configured to intercept the requested data within the sending unit via a loop connection between input and output interfaces of the sending unit. The interceptor and the loop connection are inductively coupled and configured for unidirectional communication from the sending unit to the receiving unit. A receiving unit is coupled to the eavesdropping unit for receiving the duplicated data and forwarding the duplicated data to an evaluation system located in a low security external network. A reconfigurable application layer includes at least one modular application configured to operate security related functions that support intrusion detection.

Data capture apparatus with embedded security applications and unidirectional communication

Provided is a method for data transmission between at least one first network and at least one second network, wherein a) for at least one data transmission between the at least one first network and the at least one second network, at least one connection between the first network and the second network is established and a datum or data are directed by means of a resource allocation unit arranged between the networks, and b) for the establishment of the at least one connection, the resource allocation unit exclusively allocates at least one net access resource, e.g. network cards or network adapters, which can be coupled to the second net, and a one-way communication unit arranged upstream of the net access resource for establishing a feedback-free data transmission direction.

Method and transmission device for data transmission between two or more networks

Provided is a network adapter for unidirectional transmission of a user data stream to a bidirectional network interface, the network adapter including: a first connection unit which is physically connected to a bidirectional network interface of a first device; a second connection unit which is physically connected to a bidirectional network interface of a second device; and a terminating unit which has at least one bit transmission module and which is designed to establish a bidirectional data link to the network interface of the first device, to receive the user data stream from the first device exclusively in a unidirectional fashion via the data link, and not to send a user data stream to the first device.

Network adapter for unidirectional transfer of data

A computing system has a computing device. The computing system has an input data path, which unidirectionally connects an interface device to the computing device, and an output data diode, which unidirectionally connects the computing device to the interface device. The input data path has a data lock which is connected to the interface device by a first terminal and to the computing device by a second terminal. The data lock has a storage unit for storing data and is configured such that the storage unit can be selectively connected solely to the first or second terminal but not to both terminals simultaneously. The computing device accepts data from the interface device solely if the data is transmitted to the computing device from the interface device via the input data path within a transmission session initiated by the computing device using the output data diode.

Computing system and method for operating a computing system

A method for the cryptographically protected unidirectional data transmission of payload data, wherein one or more data packets includes the payload data are transmitted on an end-to-end data transmission link from a first communication unit in a first network via a one-way communication unit, which is arranged between the first network and a second network, to a second communication unit in the second network, is provided.

Method and communication unit for the cryptographically protected unidirectional data transmission of payload data between two networks

A method and a device for a reaction-free and integrity-protected synchronization of log data between at least one first network and a second network is provided. The log data is copied by means of a monitoring device upon being transmitted from devices to a first log server in the first network. Metadata of the log data is additionally generated in a first managing unit, the metadata including time information, integrity information, origin information, and/or completeness information. The copied log data and the corresponding metadata are transmitted to the second network via a unidirectional coupling unit in a reaction-free manner. The lot data is checked and ordered chronologically in the second network using the metadata. Thus, a synchronized copy of the log data from the first network is promptly provided in the second network.

Method and apparatus for reaction-free and integrity-protected synchronization of log data

Provided is a computer-implemented method and a transmission apparatus for transmitting data between a first network and a second network having high and low security requirements, wherein a first session is set up between the first and second networks, a first data packet is transmitted from a transmitting unit in the first network via a first one-way communication unit to a receiving unit in the second network, and a second session is set up and a second data packet is transmitted from a transmitting unit in the second network via a second one-way communication unit to a validation unit, the second data packet is validated in the validation unit on a prescribed rule, positive validation of the second data packet results in a third session being set up, and the second data packet is transmitted from the validation unit to a receiving unit in the first network.

Method and transmission apparatus for transmitting data between two networks

Provided is a transmission device for feedback-free unidirectional transmission of data from a first network zone into a second network zone for evaluation at a remote application server, containing: a data export device which is arranged in the first network zone and is designed to detect the data transmitted in a network data format in the first network zone and to transform the data from the network data format into a transport data format, a unidirectional data transmission unit, which is designed to transmit the data in the transport data format into the second network zone unidirectionally, a data import device which is designed to transform the data from the transport data format back into the network data format and to transmit the data to an application server, wherein the data import device and the application server are arranged in a second network zone remote from the first zone.

Method and apparatus for repercussion-free unidirectional transfer of data to a remote application server

A method and a system for fault-correcting transfer of a dataset from a first network into a second network via a unidirectional communication unit, the receiving apparatus having a limited computing and main memory capacity is provided. The dataset is divided into partial datasets and are each coded by adding at least one correction mark. The marks and correction marks are decoded repeatedly in the second network, wherein marks and correction marks associated with a first encoded partial dataset are stored in a main memory, marks and correction marks associated with other encoded partial datasets are buffered in a background memory, and the first coded partial dataset is decoded, and then the previously received marks and/or correction marks of one of the other coded partial datasets are shifted from the background memory into the main memory. The dataset is reproduced from the decoded partial datasets in the second network.

Method and system for the error-correcting transmission of a data record via a unidirectional communication unit

A one-way coupling device for the feedback-free transmission of data from the first network with high security requirements into a second network with low security requirements, containing a request unit, an eavesdropping unit and a receiving unit, wherein the request unit is formed so as to provide a first communication link within the first network to at least one device and, moreover, to request first data from the at least one device and then to transmit the first data via a second communication link on a separate line loop of the request unit, and the eavesdropping unit, which is formed so as to eavesdrop on data on the separate line loop and to transmit data to a receiving unit which is arranged in the second network. Also, a corresponding request unit, a corresponding method and a corresponding computer program product is also provided.

One-way coupling device, request apparatus and method for feedback-free transmission of data

A computer-implemented method for error-correction-encoding and encrypting of a file is provided. The file is split into at least two blocks. The first block is encrypted using a given encryption key. The encrypted first block is encoded twice using a first and second forward error correction code of the first block. Each subsequent block is encrypted by performing an algebraic operation. The encrypted block is encoded twice using a first and second forward error correction code for this block, wherein a cryptographic indexing function provides a set of indices used by the second forward error correction code to produce the second encoded chunk. The first encoded chunks of each encrypted block are outputted. The computer-implemented method enables secure transmission of a file content between low power devices.

Growing community of inventors

Neubiberg, Germany

Martin Wimmer