Method and system for securing asset data in a computing environment

Patent metadata

Field	Value
Publication number	US-12388807-B2
Application number	US-202117800595-A
Country	US
Kind code	B2
Filing date	Feb 22, 2021
Priority date	Feb 22, 2020
Publication date	Aug 12, 2025
Grant date	Aug 12, 2025

Abstract

A method and system for securing asset data in a computing environment includes receiving a request for modifying asset data. Further, the method includes validating the request for modifying the asset data based on pre-stored one or more parameters associated with the one or more assets deployed in the technical installation and the pre-stored one or more parameters associated with the requestor profile using blockchain validation method. The method further includes modifying the pre stored asset data to generate a modified asset data based on the validated request. Furthermore, the method includes generating a digital representation model of the modified asset data using a knowledge graph. Additionally, the method includes outputting the generated digital representation model of the modified asset data on a user interface.

First claim

The invention claimed is:

1. A method for securing industrial asset data in a computing environment, the method comprising:
receiving, by a processor of a computing system, a request for modifying asset data, wherein the request comprises one or more parameters associated with the one or more assets deployed in a technical installation and one or more parameters associated with a requestor profile, the one or more assets deployed in the technical environment being connected to the computing system via a network;
validating, by the processor, the request for modifying the asset data based on both: i) pre-stored one or more parameters associated with the one or more assets deployed in the technical installation, and ii) the pre-stored one or more parameters associated with the requestor profile, using a blockchain validation method;
modifying, by the processor, the pre stored asset data to generate a modified asset data based on the validated request;
generating, by the processor, a digital representation model of the modified asset data using a knowledge graph, wherein the digital representation model of the modified asset data comprises dynamic linking between the one or more parameters associated with the one or more assets deployed in the technical installation and the one or more parameters associated with the requestor profile; and
outputting, by the processor, the generated digital representation model of the modified asset data on a user interface.

2. The method as claimed in claim 1 , wherein the requestor profile is associated with a reputation score indicating one or more privileges associated with the requestor.

3. The method as claimed in claim 1 , wherein the one or more parameters associated with the one or more assets deployed in the technical installation comprises asset identifier, asset part identifier, modification type identifier, a responder identifier, timestamp information and digital endorsement of the one or more approvers.

4. The method as claimed in claim 1 , wherein the one or more parameters associated with requestor profile comprises requestor identifier, transaction identifier, requestor privileges, a reputation score, requestor role, and an encryption key.

5. The method as claimed in claim 1 , wherein validating the request for modifying the asset data based on pre-stored one or more parameters associated with the one or more assets deployed in the technical installation and the pre-stored one or more parameters associated with the requestor profile using the blockchain validation method comprises:
executing one or more data semantic based rules on the one or more parameters associated with the one or more assets deployed in the technical installation;
determining the one or more parameters associated with the requestor profile upon executing the one or more data semantic based rules;
determining one or more pre-defined transaction management conditions applicable to the one or more parameters associated with the requestor profile;
verifying whether the one or more parameters associated with the requestor profile satisfy with the one or more pre-defined transaction management conditions; and
outputting results of verification of the one or more parameters associated with the requestor profile.

6. The method as claimed in claim 3 , wherein verifying whether the one or more parameters associated with the requestor profile satisfy with the one or more pre-defined transaction management conditions comprises:
rejecting the request for modifying the asset data if the verification of the one or more parameters associated with the requestor profile fails to satisfy the one or more predefined transaction management conditions.

7. The method as claimed in claim 1 , wherein modifying the pre stored asset data to generate a modified asset data based on the validated request comprises:
determining whether the request is successfully validated based on results of verification of the one or more parameters associated with the requestor profile;
identifying part of the pre-stored asset data requested to be modified based on the one or more parameters associated with the one or more assets;
determining type of modification to be performed on the identified part of the pre-stored asset data based on pre-stored data table; and
modifying the part of the pre-stored asset data based on the determined type of modification to generate the modified asset data.

8. The method as claimed in claim 1 , further comprising:
obtaining confirmation message associated with modification performed on the pre-stored asset data upon modifying the pre-stored asset data, wherein the confirmation message comprises additional parameters associated with the modification performed on the pre-stored asset data; and
validating the confirmation message comprising the additional parameters associated with the modification performed on the pre-stored asset data based on pre-defined conditions.

9. The method as claimed in claim 1 , wherein generating the digital representation model of the modified asset data using the knowledge graph comprises:
generating the digital representation model of the modified asset data using the knowledge graph based on the validation of the confirmation message associated with the modification performed on the pre-stored asset data.

10. The method as claimed in claim 1 , wherein generating the digital representation model of the modified asset data using the knowledge graph comprises:
determining one or more dynamic linking between the one or more parameters associated with the modified asset data based on the generated modified asset data;
validating the one or more dynamic linking between the one or more parameters associated with the modified asset data based on the pre-stored data table; and
generating the digital representation model of the modified asset data using the knowledge graph.

11. The method as claimed in claim 1 , wherein outputting the generated digital representation model of the modified asset data on the user interface comprises:
displaying the generated digital representation model of the modified asset data on the user interface, wherein the generated digital representation model is a knowledge graph.

12. The method as claimed in claim 1 , further comprising:
storing the generated digital representation model in a database.

13. A computing system comprising:
one or more processor(s); and
a memory coupled to the one or more processor(s), wherein the memory comprises an asset data management module stored in the form of machine-readable instructions executable by the one or more processor(s), wherein the asset data management module is capable of performing the method according to claim 1 .

14. A computing environment comprising:
the computing system according to claim 13 ;
a technical installation comprising one or more assets capable of communicating asset data to the computing system; and
at least one user device communicatively coupled to the computing system and the technical installation via the network.

15. A computer program product, comprising a computer readable hardware storage device having computer readable program code stored therein, said program code executable by a processor of a computer system to implement a method according to claim 1 .

Assignees

• Siemens Ag

Inventors

• Ashish Thumparthy Shiva
• Hubauer Thomas
• Joshi Janaki
• Kumar Naveen

Classifications

• H04L67/306

  User profiles · CPC title

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title

• G06Q10/063

  Operations research, analysis or management · CPC title

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• G06Q10/087 Primary

  Inventory or stock management, e.g. order filling, procurement or balancing against orders · CPC title