Siemens Aktiengesellschaft

Brainlab Ag

Technische Universitaet Muenchen

Seimens Aktiengesellschaft

Siemens Mobility Gmbh

Kargl, Anton

Michael Braun

Bernd Meyer

Anton Kargl

Markus Dichtl

Henrik Wist

Klaus Breitschaft

Claudia Droste

Hubert Schierling

Rainer Birkenbach

Erwin Hess

Georg Heinle

Franz Bauer

Stefan Pyka

Walter Lindermuth

Hans-Dieter Heining

Abdessamad Ait-Jeddi

Klaus Neuner

Steffen J Glaser

Rainer Wiegner

Ralph GÄRTNER

A method and system for accelerated decryption of a cryptographically protected user data unit, wherein a transmitter initially generates a cryptographic key that is provided with a related key identification. The transmitter then performs asymmetrical encryption of the generated cryptographic key using a public cryptographic key and encryption of at least one user data unit using the generated cryptographic key. The encrypted user data unit, the asymmetrically encrypted cryptographic key and the related key identification of the cryptographic key are transported to a receiver that decrypts the received asymmetrically encrypted key using a private key, if verification of the received related key identification of the cryptographic key indicates the cryptographic key is not present in a decrypted state in the receiver. The receiver then decrypts the received cryptographically encrypted user data unit using the cryptographic key in the receiver or with the cryptographic key decrypted using the private key.

Method and system for the accelerated decryption of cryptographically protected user data units

A method is proposed for the simultaneous optimization of an arbitrary number of electromagnetic pulses, which act in a cooperative way, or mutually compensate each other's errors. The method generally relates to pulses which can have improved properties when cooperating with each other compared to single pulses. In experiments with several scans, undesired signal contributions can be suppressed by COOP pulses, which complements and generalizes the concept of phase cycling. COOP pulses can also be used in individual scans. COOP pulses can be optimized efficiently with the aid of an extended version of the optimal-control-theory-based gradient ascent pulse engineering (GRAPE) algorithm. The advantage of the COOP pulse method is demonstrated theoretically and experimentally for broadband and band-selective excitation and saturation pulses.

Cooperative pulses

A method and system for confidentially providing a software component which is encrypted using a secret cryptographic key of a software component manufacturer, and the key is then encrypted using a first cryptographic system key, wherein the encrypted software component and the encrypted key are transported by the software component manufacturer to a destination system device. After decrypting the transported encrypted key using a second cryptographic system key, the transported encrypted software component is decrypted using the decrypted key, wherein the decrypted software component is provided for execution on the destination system device. The method can be used to protect source codes or object codes of a developed software component from access by a third party and still allows for processing using standard tools.

Method and system for confidentially providing software components

The present invention relates to a virtual machine (VM) for processing digital data (MD), in particular medical data by executing a digital data processing application program, in particular a medical data application program called MeDPAP, the virtual machine (VM) being a simulation of a computer, the virtual machine comprising at least the following components: &#x2022; a MeDPAP controller (MC) which is constituted &#x2014;so that it can be addressed by a Uniform Resource Identifier called VM-URI via a wide area network (WAN), &#x2014;to support direct interoperable interaction with a client application (MCA) over the wide area network (WAN), &#x2014;to assign a Uniform Resource Identifier called MeDPAP-URI to the MeDPAP, and &#x2014;to send the assigned MeDPAP-URI to the client application via the wide area network (WAN); and &#x2022; the MeDPAP which is constituted &#x2014;to process the digital data (MD), &#x2014;so that it can be addressed by the client application via the wide area network (WAN) by using the MeDPAP-URI, and &#x2014;to support direct interaction with the client application over the wide area network for receiving instructions from the client application (MCA) to process the digital data.

Processing of digital data, in particular medical data by a virtual machine

A method and a system for naming-conflict-free integration of software components originating from software component manufacturers (OEM), comprising software development devices from different software component manufacturers (OEM) that manufacture and encrypt software components with the respective cryptographic key, wherein when a naming conflict occurs during the integration of encrypted software components, at least one of the encrypted software components in which the naming conflict occurred is expanded by a naming conflict resolution rule to thereby allows for the resolution of naming conflicts in encrypted software components that can originate from different software component manufacturers without the source code of the software components becoming visible to third parties.

Method and system for resolving a naming conflict

The present invention relates to a virtual machine (VM) for processing digital data, in particular medical data, by executing a digital data processing application program, in particular a medical data processing application program (MeDPAP), the virtual machine (VM) being a simulation of a computer, a) the virtual machine (VM) comprising a volatile memory (ViMStor) configured to comprise a storage space for temporary data (TEMP) for temporarily storing the digital data; b) the virtual machine (VM) being configured to be accessed by any virtual machine user activated on a virtual machine user list, wherein any activated maintenance virtual machine user is denied any permission regarding the storage space for temporary data (TEMP), wherein denying any permissions is performed by logging into the virtual machine (VM) as an administrator and setting corresponding options; c) wherein any administrator has been deactivated on the virtual machine user list, wherein deactivating any administrator has been performed by logging into the virtual machine (VM) as an administrator and setting corresponding options for each administrator in the virtual machine user list; d) wherein the virtual machine (VM) is in a state in which the administrator has been logged off after deactivating the administrator on the virtual machine user list.

Virtual machine for processing medical data

A method for the authentication of an RFID tag uses an asymmetric cryptography method which ensures protection against the recycling of authentication RFID tags and needs no deactivation of the corresponding RFID tag for this purpose. To this end, the certificate of an RFID tag to be checked is not stored on the RFID tag but is stored physically separately from the RFID tag. Firstly, the RFID reader reads the certificate of the RFID tag to be checked before the challenge-response protocol is carried out successfully with the RFID tag to be checked. Consequently, an RFID tag can be reused for authentication only when the certificate relating to this RFID tag is known.

Authentication of an RFID tag using an asymmetric cryptography method

The embodiments relate to a method for the encrypted data exchange between subscribers of a communication system using cryptography based on elliptical curves, wherein upon a query by a first subscriber a scalar multiplication is calculated by the second subscriber, wherein merely part of the result of the scalar multiplication is returned to the first subscriber as a response. The invention relates to a communication system.

Method for the encrypted data exchange and communication system

An authentication method authenticates between subscribers of a communications system using an asymmetric elliptic curve encryption algorithm. The method involves providing a first and at least one second subscriber having a first or second secret key known only to the respective subscriber and a public key; authenticating an inquiry transmitted by the first subscriber with respect to the validity of the first certificate contained therein and associated with the first subscriber; calculating the response of the second subscriber associated with the inquiry; randomized encryption of the calculated response and a second certificate associated with the second subscriber using the public key; decryption and authentication of the response transmitted by the second subscriber with respect to the validity of the second certificate contained therein.

Authentication method and communications system used for authentication

The aim of the embodiments is to provide a method for the secure processing of data, in which security is increased in relation to side channel attacks. To achieve this, operation codes for commanding co-processors are determined, for example for the bit-dependent transposition of register contents. The solution exploits the fact that as a result of the technical configuration for the co-processor, a shift of register contents, for example from register A to register B cannot be differentiated from the exterior from a shift from register A to register C.

Method for the secure determination of data

A method for securely encrypting or decrypting a message or for generating or verifying a digital signature in a message, in which the message is subjected, with the aid of a processor, to a mathematical operation using a key (k) which can be represented in the form of a binary number with a sequence of bits, and computational operations are sequentially carried out on auxiliary variables for each bit. The dependence of the computational result on the values of individual bits is taken into account by reading the memory addresses from the auxiliary variables and assigning them to address variables. The difference between the addresses is calculated and, depending on the respective current bit, is added to, or subtracted from, the computer addresses. The assignment of the auxiliary variables to the address variables can thus be interchanged. As a result, the order and selection of the computational operations is controlled on the basis of bits without the program sequence having to contain jump instructions.

Method for securely encrypting or decrypting a message

In one aspect, an electric field device for use in process automation is provided to simplify supply of an electric field device located at an installation site in the process with information originating from its process environment. At least one transponder is arranged in the area of the installation site. The transponder comprises a memory containing data with predetermined information on the process environment of the field device. The field device comprises a reader unit for contactlessly reading the data and an evaluation unit for processing the information for the functions to be carried out by the field device within the framework of process automation.

Electrical field device for use in process automation

Conventional cryptographic methods that are based on elliptic curves are prone to side-channel attacks. Previously known methods for preventing side-channel attacks have the disadvantage of requiring high arithmetic capacity and a large amount of available memory space. The proposed method overcomes said disadvantage by using a process for verifying points on elliptic curves which saves arithmetic capacity and memory space.

Method, device, and system for verifying points determined on an elliptic curve

Method and apparatus for correction of a detected faulty actual valve of

A method of operating a three-step inverter that supplies a polyphase machine whose electric output variables are formed by scanning two zero-shifted setpoint signal sets with triangular modulation signal, in a space vector representation using double modulation. A first or second interval value is formed between the maximum or minimum value of phase signal waveforms of the setpoint signal sets and an upper or lower scanning limit. The first and second interval values are added or subtracted from the phase signal waveforms of the first and second setpoint signal sets, to thereby increase the linear control range of the inverter and reduce the harmonic spectrum in the inverter output signals.

Growing community of inventors

Munich, Germany

Michael Braun