Method, apparatuses and system for exchanging data between a distributed database system and devices

Patent metadata

Field	Value
Publication number	US-11640394-B2
Application number	US-201917259174-A
Country	US
Kind code	B2
Filing date	Jun 17, 2019
Priority date	Jul 11, 2018
Publication date	May 2, 2023
Grant date	May 2, 2023

Abstract

A gateway or a network adapter that allows old devices or legacy devices to be connected to a distributed database system such as a blockchain without having to change any configuration in the old devices is provided.

First claim

The invention claimed is:

1. A receiving apparatus, comprising:
a first communication interface, wherein;
the first communication interface is configured to receive first messages from a distributed database system;
one or more processors configured to execute program commands, wherein;
the one or more processors are configured to use respective message content of the first messages to calculate an association concerning which devices an applicable first message of the first messages is intended for;
the one or more processors are configured to convert the message content of the applicable first message into a data format for the associated device;
a cryptography module, wherein the cryptography module comprises cryptographic data associated with the devices, the cryptographic data are ascertained on the basis of a combination of explicit device-specific data and receiving-apparatus-specific data, and the cryptographic data are reproducibly ascertained for the applicable device, wherein the cryptographic module uses the cryptographic data to check and/or decrypt at least some of the message content of the applicable first message for an associated device, wherein the checking and/or decrypting involves the applicable cryptographic data being loaded on a basis of a device associated with the data;
a second communication interface, wherein; and
the second communication interface is configured to transmit the converted data to the device associated with the applicable first message.

2. The receiving apparatus as claimed in claim 1 , wherein:
the receiving apparatus retrieves a device state from the device associated with the data; and
a transmission to the associated device is effected on the basis of the retrieved device state.

3. The receiving apparatus as claimed in claim 2 , wherein the device state comprises a data record about the available device resources and/or current device properties.

4. The receiving apparatus as claimed in claim 1 , wherein:
a transmission to the applicable device is effected if prescribed requirements of the applicable data are met by the associated device; and
the meeting of the prescribed requirements is checked on the basis of the device state.

5. The receiving apparatus as claimed in claim 1 , wherein the conversion module is configured to use the device to check which data from the data can be processed by the device.

6. A sending apparatus, comprising:
a first communication interface, wherein;
the first communication interface is configured to communicate with devices;
the first communication interface is configured to receive first messages from the devices;
one or more processors configured to execute program commands, wherein;
the one or more processors are configured to use respective message content of the first messages to calculate an association concerning which device has sent an applicable first message;
wherein;
the one or more processors are configured to convert the message content of the applicable first message into a data format for the distributed database system;
a cryptography module, wherein the cryptography module comprises cryptographic data associated with the devices, the cryptographic data are ascertained on the basis of a combination of explicit device-specific data and receiving-apparatus-specific data, and the cryptographic data are reproducibly ascertained for the applicable device, wherein the cryptographic module uses the cryptographic data to load applicable cryptographic data, and wherein the applicable cryptographic data are used to cryptographically protect at least some of the message content of the applicable first message in device-specific fashion for the associated device;
a second communication interface, wherein:
the second communication interface is configured to communicate with a distributed database system, and wherein the second communication interface is configured to transmit the converted message content to the distributed database system.

7. The sending apparatus as claimed in claim 6 , wherein:
at least a part of the message content of the applicable first message is cryptographically protected in a device-specific manner for the associated device by means of the applicable cryptographic data and
the cryptographic protection is effected before the transmission of the message content or of the data.

8. The sending apparatus and/or receiving apparatus as claimed in claim 6 , wherein:
the distributed database system is a blockchain; and
the messages which are sent and/or received by the distributed database system are transactions.

9. The sending apparatus and/or receiving apparatus as claimed in claim 6 , wherein at least some of the devices are devices of an automation network.

10. A system, comprising:
a receiving apparatus as claimed in claim 1 ; and
a sending apparatus.

11. A method for the computer-aided receiving of data, the method comprising:
receiving first messages from a distributed database system by means of a first communication interface;
calculating an association for the first messages, wherein the calculating involves determining which devices an applicable first message of the first messages is intended for;
converting the message content of the applicable first message into a data format for the associated device;
loading cryptographic data on the basis of the associated device, wherein the cryptographic data are associated with the associated device and the cryptographic data are ascertained on the basis of a combination of explicit device-specific data and receiving-apparatus-specific data, and the cryptographic data are reproducibly ascertained for the applicable device;
checking and/or decrypting at least some of the message content of the applicable first message for the associated device on the basis of the cryptographic data; and
transmitting the converted message content to the device associated with the applicable first message.

12. A method for the computer-aided sending of messages or data, the method comprising:
receiving first messages from devices by means of a communication interface;
calculating an association on a basis of respective message content of the first messages, wherein it is calculated which device has sent an applicable first further message;
converting the message content of the applicable first message into a data format for the distributed database system;
loading cryptographic data on the basis of the associated device, wherein the cryptographic data are associated with the associated device, and the cryptographic data are ascertained on the basis of a combination of explicit device-specific data and sending-apparatus-specific data, and the cryptographic data are reproducibly ascertained for the applicable device, wherein the applicable cryptographic data are used to cryptographically protect at least some of the message content of the applicable first message in device-specific fashion for the associated device; and
transmitting the converted message content to the distributed database system.

13. A computer program product, comprising a computer readable hardware storage device having computer readable program code stored therein, said program code executable by a processor of a computer system to implement a method as claimed in claim 12 .

14. A providing apparatus for the computer program product as claimed in claim 13 , wherein the providing apparatus stores and/or provides the computer program product.

Assignees

• Siemens Ag

Inventors

• Jetzfellner Thomas

Classifications

• H04L2209/805

  Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor · CPC title

• H04L9/3239

  involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD · CPC title

• H04L63/12 Primary

  Applying verification of the received information (cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32) · CPC title

• G06F21/602

  Providing cryptographic facilities or services · CPC title

• H04L67/56

  Provisioning of proxy services (store-and-forward switching systems in data switching networks H04L12/54) · CPC title