Method for ensuring the authenticity of a field device

Patent metadata

Field	Value
Publication number	US-11206271-B2
Application number	US-201716337587-A
Country	US
Kind code	B2
Filing date	Aug 28, 2017
Priority date	Sep 30, 2016
Publication date	Dec 21, 2021
Grant date	Dec 21, 2021

Abstract

The present disclosure relates to a method for ensuring the authenticity of a field device. The method includes a step of assigning a unique authentic identification feature to the field device or providing the field device with a unique authentic identification feature. The method also includes steps of transmitting ACTUAL identification data to a participant node which transmits the ACTUAL identification data to the other participant nodes in a transaction, validating the transaction by the participant nodes, and creating a data block containing the transaction, wherein the data block is transmitted to each of the participant nodes. The method also includes verifying the data block by all participant nodes, storing the validated data block in the databases, comparing the ACTUAL identification data with corresponding TARGET identification data or original identification data from an authentication point, and generating a response containing the result of the comparison.

First claim

The invention claimed is:

1. A method for ensuring the authenticity of a field device or component thereof in an automation technology comprises:
including a sensor or an actuator and an electronic unit in the field device;
integrating or connecting the field device into a first service platform;
operating the first service platform in a decentralized manner using a distributed ledger or a blockchain technology, wherein the first service platform is composed of a plurality of participant nodes;
integrating at least one database into each participant node;
associating a unique authentic identification feature with the field device or the component of the field device, or providing the field device or the component of the field device with a unique authentic identification feature;
determining the unique authentic identification feature without manipulating the field device or the component of the field device, wherein manipulating includes causing the field device to deviate from specifications of a manufacturer of the field device;
transmitting actual identification data that represent the unique authentic identification feature to the participant nodes in a transaction, or transmitting actual identification data that represent the unique authentic identification feature to a participant node which transmits the actual identification data to the other participant nodes in a transaction;
validating the transaction by the participant nodes;
creating a data block containing the transaction when a predetermined number of participant nodes validate the transaction;
transmitting the created data block to the participant nodes;
verifying the data block by the participant nodes, wherein the data block is valid when a second predetermined number of the participant nodes validates the data block;
storing the validated data block in the databases;
comparing the actual identification data with corresponding target identification data or original identification data by an authentication point; and
generating a response containing a result, wherein the first service platform detects manipulations of field devices, and wherein manipulations include changes that cause the field device to deviate from specifications of a manufacturer of the field device.

2. The method of claim 1 , wherein the identification data are determined visually, and/or acoustically, and/or electronically, and/or radiometrically.

3. The method of claim 1 , wherein a hash value of a firmware associated with the field device is used as the unique authentic identification feature.

4. The method of claim 1 , wherein comparing the ACTUAL identification data with the TARGET identification data is performed using a central database or decentrally arranged databases.

5. The method of claim 4 , wherein the database or the databases is or are provided by a service provider.

6. The method of claim 1 , wherein the participant nodes are field devices.

7. The method of claim 1 , wherein the participant nodes are full node versions or light node versions.

8. The method of claim 1 , further including a second service platform operated decentrally using a distributed ledger or blockchain technology for finalizing service contracts or for payment of service costs.

9. The method of claim 8 , wherein ETHEREUM or Blockstream is used for the second service platform.

10. The method of claim 8 , wherein service costs are paid using cryptocurrency.

11. The method of claim 4 , wherein the comparison of ACTUAL identification data with the TARGET identification data is executed on a smart phone, a tablet computer, or a portable operating tool.

12. The method of claim 3 , wherein the ACTUAL identification data are calculated based on a super hash value, wherein the super hash value is determined from the hash value of the firmware of the field device and from the identification data of the at least one unique authentic identification feature of the field device or of the component of the field device, incorporating the serial number of the field device, and incorporating a first predetermined algorithm.

13. The method of claim 12 , wherein a master hash value is calculated from the hash value of the firmware and the serial number of the field device with the assistance of a second predetermined algorithm, wherein the identification data are determined based on the master hash value.

14. The method of claim 13 , wherein the master hash value is computationally linked to the data generated by a selected field device via a third predefined algorithm, so that the data are uniquely identified as data of the selected field device, wherein the data generated by the selected field device includes measurement data, control data, status data, diagnostic data, and/or historical data.

15. The method of claim 14 , wherein the master hash value is linked to a nonce.

Assignees

• Endress Hauser Se Co Kg

Inventors

• Spanke Dietmar
• Fink Nikolai
• Gunzert Michael
• Kaiser Ulrich
• Mousko Dimitri

Classifications

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L63/12 Primary

  Applying verification of the received information (cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32) · CPC title

• H04L67/125

  involving control of end-device applications over a network · CPC title

• H04W12/069

  using certificates or pre-shared keys · CPC title

• G06Q20/065

  using e-cash · CPC title