Siemens Aktiengesellschaft

Siemens Healthcare Gmbh

Siemens Mobility Gmbh

Siemens Enterprise Communications Gmbh & Co. Kg

Unify Gmbh Co. Kg

III Holdings 12, LLC

Steffen Fries

Rainer Falk

Daniel Schneider

Hans Aschauer

Kai Fischer

Markus Heintel

Matthias Seifert

Wolfgang Klasen

Jens-Uwe Busser

Axel Pfau

Christian Peter Feist

Angela Schattleitner

Jürgen Gessner

Jens-Uwe Buβer

Andreas Güttinger

Hendrik Brockhaus

Hermann Seuschek

Johannes Zwanzger

Fabrizio De Santis

Georg Trummer

Ute Rosenbaum

Dominik Merli

Andreas Köpf

Marcus Schafheutle

David Von Oheimb

Thomas Zeschg

Joachim Walewski

Hans-Peter Huth

Jens-Uwe Bußer

Dirk Hartmann

Uwe Blöcher

Stefan Seltzsam

Mohamed Khalil

Hans-Joachim Hof

Markus Böhm

Jean Georgiades

Christoph Heinrich

Anton Sebastian Huber

Amine Mohamed Houyou

Stefan Pyka

Michael Munzert

Erich Niedermayr

Aliza Maftun

Marco Lambio

Franz Sperl

Andreas Furch

Gerald Volkmann

Tolga Sel

Joachim Koppers

Stephan Schüler

Daniela Friedrich

Christoph Ernst Ludwig

Jan Eh

Rishith Ellath Meethal

Niranjana Papagudi Subrahmanyam

Omar Belhachemi

Eric Scheer

Milos Svoboda

Maik Seewald

Juergen Gessner

Carsten Sattler

Andreas Guettinger

Bernhard Quendt

Andreas KÖPF

A method for authenticating a communication partner on a device is provided, in which method, in addition to a physical device implementation, there is at least one virtual device implementation allocated to the device, the method having the following steps: —receiving an access authorization of a communication partner in one first of these two device implementations, —checking, by the first device implementation, the access authorization and —if the access authorization is deemed permissible, providing an authorization verification from the first device implementation to the communication partner, and —permitting an access to the second device implementation of these two device implementations by the communication partner by the authorization verification.

Authenticating a communication partner on a device

For detecting a cyber-attack on a machine controller, a concurrent simulation of the machine is run in a secured access domain. From the machine controller actual control data are transmitted to the machine and resulting monitoring data are transmitted to a monitoring device. Furthermore, sensor data of the machine are transmitted to the concurrent simulation on a first secured transmission path. Based on the sensor data, the concurrent simulation simulates an operational behavior of the machine, thus inferring simulated monitoring data. The simulated monitoring data are then compared with the resulting monitoring, and an alarm signal is triggered depending on the comparison.

Method and system for detecting a cyber-attack on a machine controller

Various embodiments of the teachings herein include a method for issuing a cryptographically protected certificate of authenticity for a user comprising: providing a public user key; providing a public client key for a client, the public client key assigned to the user; forming a request including the public user key, wherein the public user key is protected with the aid of a private client key assigned to the provided public client key; and issuing a cryptographically protected certificate of authenticity containing the public user key and identifying the client. The cryptographically protected certificate of authenticity contains or references a cryptographic client identifier formed depending at least in part on the public client key.

Method for issuing a cryptographically protected certificate of authenticity for a user

A method for key management in a field-programmable integrated part of an integrated circuit is disclosed herein. According to the method, a hardware configuration for the field-programmable integrated part is loaded into the field-programmable integrated part. The hardware configuration includes a key derivation functionality. Further, using the key derivation functionality, a cryptographic key is derived based on information provided in the field-programmable integrated part.

Key management in an integrated circuit

Provided is a method for the validation of a digital certificate by a validation apparatus that checks the certificate of a communication partner on behalf of a first device, including the method steps of: the first device (requesting validation of the certificate of the communication partner at a first validation apparatus, the first validation apparatus querying validation information at a status collection apparatus, checking, in the first validation apparatus, whether validation information has been received from the status collection apparatus, and transmitting the validation information from the first validation apparatus to the first device, wherein, only in the event of a negative inspection result, the validation information of the certificate is determined in the first validation apparatus.

Method for validating a digital certificate

Methods and devices are provided for establishing secure communication between the devices without relying on local time information. According to the methods, a client device, which is going to establish the secure communication to a server device, is provided by the server device with a proof of its integrity. The proof of integrity of the server device is issued by a trusted third party (TTP) to which both devices have a trust relation.

Establishing secure communication without local time information

Provided is a device unit, including a module, which can configure the device unit with an operating state from among different operating states during the start-up process and/or during ongoing operation of the device unit, wherein a first protected operating state of the different operating states is designed to allow the execution of at least one operating process which can be predefined and to optionally protect the operating process by means of defined cryptographic means, wherein at least one second operating state of the different operating states is designed to deactivate the first protected operating state and to allow at least one other changeable operating process and to optionally protect the operating process by means of specifiable cryptographic means.

Device unit suitable for operation in a protected and/or open operating state and associated method

An issuing device is configured to: respond to a challenge request by transmitting a challenge; and respond to a certification request including a public key and ownership information thereof by issuing a digital certificate certifying the ownership information. The ownership information includes counterparty identity information relating to a ledger of a distributed database. The digital certificate is issued if it is successfully verified that a valid response to the challenge has been posted to the ledger of the distributed database and is associated therein with the counterparty identity information of the certification request. The digital certificate facilitates proofing that an owner of a public key is a given counterparty to a blockchain ledger. Also, a corresponding requesting device and corresponding methods and computer program products for issuing and requesting a digital certificate are disclosed.

Issuing device and method for issuing and requesting device and method for requesting a digital certificate

Monitoring the integrity of industrial automation systems is provided. For example, a negative impact on integrity caused by unauthorized access should be identified. This is made possible by comparing state data which describe the operating state of the industrial automation system, with sensor data which describe an environmental influence of the automation system.

Integrity monitoring in automation systems

The invention relates to a method for transferring data in a publish-subscribe system () comprising a key distribution server () and a plurality of communication devices () which can be coupled to the key distribution server () and which comprise at least one server device and a number of client devices. The method comprises the following steps: a) providing (S) a group key by means of the key distribution server () to a group (G) selected from the communication devices () to establish group communications, secured by the group key, within the group (G) of selected communication devices (); b) providing (S) a point-to-point connection which can be encrypted by means of a public key of an asymmetric encryption, between a first and a second communication device () of the group (G); and c) transferring (S) a message encrypted by means of the public key for the point-to-point connection and secured by means of the group key, between the first and the second communication device ().

Method and apparatus for transferring data in a publish-subscribe system

A detection device which is suitable for receiving a service within a network assembly is provided, having the following: means for providing cryptographic security at or above the transport level of the communication protocol levels which can be used in the network assembly for at least one first existing communication connection between the detection device and a network access device which is arranged in the network assembly and which can be used to monitor data detected by the detection device and/or control an additional device within the network assembly using the data detected by the detection device, means for generating and/or determining network access configuration data for at least one additional second communication connection, which is to be cryptographically secured below the transport level, between the detection device and the network access device, means for providing the generated and/or determined network access configuration data to the network access device.

Method and devices for providing at least one service, in particular in the automotive environment

Provided is a method for transmitting data packets over a network from a sender to a receiver via a communication link consisting of at least one transmission section, via which the data packet is transmitted from a sender node to a receiver node, the method having the following steps for at least one transmission section: first security information, which includes information about a cryptographic protective function used in the transmission of the data packet via an adjacent transmission section, is assigned to the data packet by the sender node, the data packet having the assigned security information is transmitted to the receiver node of the transmission section, the security information is checked in the receiver node against a preset guideline, and at least one measure is provided in accordance with the result of the check.

Method for transmitting data packets

A method for verifying an execution environment provided by a configurable hardware module, where the execution environment is used for execution of at least one hardware-application, includes receiving a hardware-application. The hardware-application includes configuration data describing an instantiation as a hardware-application component on the configurable hardware module. A received hardware-application is instantiated as the hardware-application component in the execution environment. The execution environment of the configurable hardware module that executes the hardware-application component in the respective execution environment is analyzed by an instantiated hardware-application component. The hardware application component communicates with a characterizing unit providing characterizing parameters for the execution environment of the configurable hardware module. The analyzed execution environment of the configurable hardware module is verified as admissible for execution of the hardware-application component if the analyzed execution environment matches the characterizing parameters provided by the characterizing unit.

Method for verifying an execution environment used for execution of at least one hardware-application provided by a configurable hardware module

A method for validating a digital user certificate of a user by a checking device is provided. The user certificate is protected by a digital signature with an issuer key of an issuance location which issues the user certificate. The method has the steps of: receiving the user certificate in the checking device, checking the user certificate using a certificate path positive list with at least one valid certificate path which is provided to the checking device by at least one positive path server, and confirming the validity of the user certificate if the issuer key of the user certificate can be traced back to a root certificate according to one of the valid certificate paths of the certificate path positive list. Also provided is a system, a checking device, a user device, a positive path server, and a computer program product which are designed to carry out the method for validating a digital user certificate.

Method for validating a digital user certificate

A method, system, transmitter, and receiver for authenticating a transmitter are disclosed. The authentication is performed using an asymmetric key pair and using a digital signature. The method for authenticating the transmitter includes generating a user identification, calculating the digital signature, generating an authentication request message, and transmitting the authentication request message to a receiver.

Method, system, transmitter, and receiver for authenticating a transmitter

Growing community of inventors

Baldham, Germany

Steffen Fries