Siemens Aktiengesellschaft

Thomas Zeschg

Rainer Falk

Hans Aschauer

Christian Peter Feist

Hermann Seuschek

Aliza Maftun

Steffen Fries

Daniel Schneider

Markus Dichtl

Fabrizio De Santis

Andreas Furch

Tolga Sel

Omar Belhachemi

Malek Safieh

Florian Wilde

Various embodiments of the teachings herein include a method for onboarding an IoT device () of a manufacturer, in a manner secure against quantum computer attacks, in an infrastructure of a customer by means of a first server () of a manufacturer domain of the manufacturer and a second server () of a customer domain of the customer. In some embodiments, three authenticated and encrypted communication channels and a key encapsulation method are used to provide a device certificate of the customer domain for the IoT device on the IoT device.

Method and system for onboarding an IoT device

Incoming and outgoing communication of a hardware-application component is monitored and controlled at runtime of the hardware-application component. In this way, a kind of firewall is provided for ensuring secure and un-altered operation of a hardware-application performing security-critical functionalities on a field-programmable gate array. The hardware-application component may interact with other components directly and/or via an on-chip bus. The monitoring of incoming and/or outgoing communication is particularly advantageous when using third party hardware-applications or software applications, i.e., applications developed by untrusted parties. Another advantage is the possibility of monitoring and controlling all the communication between hardware-applications, hardware- and software applications, hardware-applications and peripherals, IO controllers, etc. It is beneficial especially in case a hardware-application is compromised and tries to compromise the rest of the embedded device, or in case a corrupted software application tries to compromise the associated hardware-application at runtime.

Method and configurable hardware module for monitoring a hardware-application

A method for key management in a field-programmable integrated part of an integrated circuit is disclosed herein. According to the method, a hardware configuration for the field-programmable integrated part is loaded into the field-programmable integrated part. The hardware configuration includes a key derivation functionality. Further, using the key derivation functionality, a cryptographic key is derived based on information provided in the field-programmable integrated part.

Key management in an integrated circuit

A method for verifying an execution environment provided by a configurable hardware module, where the execution environment is used for execution of at least one hardware-application, includes receiving a hardware-application. The hardware-application includes configuration data describing an instantiation as a hardware-application component on the configurable hardware module. A received hardware-application is instantiated as the hardware-application component in the execution environment. The execution environment of the configurable hardware module that executes the hardware-application component in the respective execution environment is analyzed by an instantiated hardware-application component. The hardware application component communicates with a characterizing unit providing characterizing parameters for the execution environment of the configurable hardware module. The analyzed execution environment of the configurable hardware module is verified as admissible for execution of the hardware-application component if the analyzed execution environment matches the characterizing parameters provided by the characterizing unit.

Method for verifying an execution environment used for execution of at least one hardware-application provided by a configurable hardware module

Growing community of inventors

Munich, Germany

Thomas Zeschg