Methods, devices and system for the security-protected provision of sets of data

Patent metadata

Field	Value
Publication number	US-12323532-B2
Application number	US-201917423221-A
Country	US
Kind code	B2
Filing date	Nov 18, 2019
Priority date	Jan 16, 2019
Publication date	Jun 3, 2025
Grant date	Jun 3, 2025

Abstract

An ecosystem of devices that autonomously interact with one another by a blockchain is provided, to create a security-protected data processing of sensor data or measurement data for an object by a blockchain infrastructure. Fields of application include supply-chain scenarios or industrial control applications of blockchains.

First claim

What is claimed:

1. A device for calculating a cryptographic checksum for a data structure, comprising:
a capture module for capturing individual features of an object by a capture device;
a calculation module for calculating an object-specific characteristic on a basis of the individual features;
a cryptography module for providing a first cryptographic key on a basis of the individual features; and
a protection module for cryptographically protecting a data structure by way of a cryptographic checksum, wherein the protection module calculates the cryptographic checksum by way of the first cryptographic key,
wherein the individual features are compared with a predefined reference value, and when there is a match between the predefined reference value and the individual features the first cryptographic key is released by the cryptography module.

2. The device as claimed in claim 1 , wherein:
the characteristic is calculated taking into account specified tolerance values of the individual features,
the first cryptographic key is calculated on a basis of the characteristic and the individual features, or
a second cryptographic key, which decrypts the first cryptographic key, is calculated on the basis of the characteristic and the individual features.

3. The device as claimed in claim 1 , wherein:
the data structure comprises an object data record,
the object data record specifies geometric points and interfaces at which the capture device can capture the individual features,
the object data record comprises the individual features and the object-specific characteristic in encrypted form,
the encrypted the individual features or the object-specific characteristic can be decrypted by means of the first cryptographic key or a third cryptographic key,
the object data record comprises further object-related data, the further object-related data includes at least one of: measurement values of the object, measurement values about the object, manufacturing details of the object, and whereabouts of the object,
the further object data are captured by sensors of the device for the object,
the sensors include at least one of a GPS module, temperature sensors, optical sensors, and combinations thereof which detect corresponding properties of the object.

4. The device as claimed in claim 1 , wherein:
the first cryptographic key is additionally calculated taking into account by a secret character string, and
the first cryptographic key is a private key of an asymmetric key pair or is a symmetric key.

5. The device as claimed in claim 1 , wherein:
the data structure is a transaction of a distributed database system and the cryptographic checksum is the transaction checksum,
the distributed database system is a blockchain,
the device is as a node or oracle of the distributed database system,
the cryptographic checksum is a digital signature.

6. A verification device for verifying a cryptographic checksum of a data structure, comprising:
a reception module for receiving a data structure, wherein the data structure is protected by a cryptographic checksum;
a capture module for capturing individual features of an object by a capture device;
a calculation module for calculating an object-specific characteristic on a basis of the individual features;
a cryptography module for providing a first cryptographic key on a basis of the individual features and the object-specific characteristic; and
a verification module for verifying the cryptographic checksum by the first cryptographic key,
wherein the individual features are compared with a predefined reference value, and when there is a match between the predefined reference value and the individual features the first cryptographic key is released by the cryptography module.

7. A write control module, comprising:
a communication interface for transferring messages, wherein the messages are transferred to a distributed database system;
a verification module, wherein:
the verification module loads a data write configuration that specifies conditions under which the messages are written to the distributed database system,
the verification module verifies whether the conditions for writing the messages to the distributed database system are met;
a transfer control module, wherein:
the transfer control module controls a transfer of a message to the distributed database system by the communication interface on a basis of a check result of the verification module,
wherein the message contains an object with individual features such that the individual features are comparable with a predefined reference value, and when there is a match between the predefined reference value and the individual features a first cryptographic key is releasable by a cryptography module.

8. The write control module as claimed in claim 7 , wherein:
the data write configuration stipulates that one or more specified nodes have already written messages to the distributed database system,
the conditions of the data write configuration stipulate that messages from the nodes are already available in the distributed database system.

9. The write control module as claimed in claim 7 , wherein:
the checksums of messages from one or more nodes are verified when verifying the conditions of the data write configuration,
the messages for verification are stored in the distributed database system,
the conditions which the messages are to meet for verification are determined by the data write configuration.

10. The write control module as claimed in claim 7 , wherein:
the write control module selects one or more checksum-protected messages of the distributed database system, wherein corresponding data about the corresponding messages are stored by the sending apparatus,
the write control module verifies the selected messages or some of the selected messages on a basis of the stored messages when verifying the conditions of the data write configuration.

11. The write control module as claimed in claim 7 , wherein the data write configuration conditions comprise one, more or a combination of the following parameters:
a time window that must be observed for messages to be verified or selected,
the nodes are specified by the corresponding node information,
the messages of the corresponding nodes must comprise a specified content,
the checksums of the messages to be verified must meet specified cryptographic conditions.

12. A transmission apparatus for controlling a transmission of a message, comprising:
a message data capture module, wherein
the message data capture module reads a priority data record with a priority from a message,
the message data capture module reads a destination of the message,
the priority is assigned transmission parameters for the message transmission;
a determination module, wherein
the determination module generates a message control data record for controlling the transfer of the message on a basis of the destination and the priority,
the message control data record is assigned to the message,
a transfer module, wherein
the transfer module transmits the message to a node of a distributed database system depending on the message control data record,
the node is specified by the message control data record,
wherein the message contains an object with individual features such that the individual features are comparable with a predefined reference value, and when there is a match between the predefined reference value and the individual features a first cryptographic key is releasable by a cryptography module.

13. The transmission apparatus as claimed in claim 12 , where

Assignees

• Innomotics Gmbh

Inventors

• Jetzfellner Thomas

Classifications

• G06F21/6227

  where protection concerns the structure of data, e.g. records, types, queries · CPC title

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title

• H04L9/3236

  using cryptographic hash functions · CPC title

• G06F21/64 Primary

  Protecting data integrity, e.g. using checksums, certificates or signatures · CPC title

• H04L9/3242

  involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC · CPC title