Method for ensuring the authenticity of a field device

Patent metadata

Field	Value
Publication number	US-2020036728-A1
Application number	US-201716337587-A
Country	US
Kind code	A1
Filing date	Aug 28, 2017
Priority date	Sep 30, 2016
Publication date	Jan 30, 2020
Grant date	—

Abstract

The present disclosure relates to a method for ensuring the authenticity of a field device. The method includes a step of assigning a unique authentic identification feature to the field device or providing the field device with a unique authentic identification feature. The method also includes steps of transmitting ACTUAL identification data to a participant node which transmits the ACTUAL identification data to the other participant nodes in a transaction, validating the transaction by the participant nodes, and creating a data block containing the transaction, wherein the data block is transmitted to each of the participant nodes. The method also includes verifying the data block by all participant nodes, storing the validated data block in the databases, comparing the ACTUAL identification data with corresponding TARGET identification data or original identification data from an authentication point, and generating a response containing the result of the comparison.

First claim

1 - 15 . (canceled)

16 . A method for ensuring the authenticity of a field device in automation technology or a component of the field device, wherein the field device has a sensor and/or an actuator and an electronic unit; wherein the field device is integrated into a first service platform or is connected to a first service platform, wherein the first service platform is operated in a decentralized manner using a distributed ledger or blockchain technology and is composed of a plurality of participant nodes, wherein at least one database is integrated into each participant node, wherein the method includes the following steps:
associating a unique authentic identification feature with the field device or the component of the field device, or providing the field device or the component of the field device with a unique authentic identification feature; determining the unique authentic identification feature without manipulating the field device or the component of the field device; transmitting ACTUAL identification data that represent the unique authentic identification feature to the participant nodes in a transaction, or transmitting ACTUAL identification data that represent the unique authentic identification feature to a participant node which transmits the ACTUAL identification data to the other participant nodes in a transaction; validating the transaction by the participant nodes; creating a data block containing the transaction if a predetermined number of participant nodes validate the transaction; transmitting the created data block to the participant nodes; verifying the data block by the participant nodes, wherein the data block is valid if a second predetermined number of the participant nodes validates the data block, storing the validated data block in the databases; comparing the ACTUAL identification data with corresponding TARGET identification data or original identification data by an authentication point; and generating a response containing a result.

17 . The method of claim 16 , wherein the identification data are determined visually, and/or acoustically, and/or electronically, and/or radiometrically.

18 . The method of claim 16 , wherein a hash value of a firmware associated with the field device is used as the unique authentic identification feature.

19 . The method of claim 16 , wherein comparing the ACTUAL identification data with the TARGET identification data is performed using a central database or decentrally arranged databases.

20 . The method of claim 19 , wherein the database or the databases is or are provided by a service provider.

21 . The method of claim 16 , wherein the participant nodes are field devices.

22 . The method of claim 16 , wherein the participant nodes are full node versions or light node versions.

23 . The method of claim 16 , further including a second service platform operated decentrally using a distributed ledger or blockchain technology for finalizing service contracts or for payment of service costs.

24 . The method of claim 23 , wherein ETHEREUM or Blockstream is used for the second service platform.

25 . The method of claim 23 , wherein service costs are paid using cryptocurrency.

26 . The method of claim 19 , wherein the comparison of ACTUAL identification data with the TARGET identification data is executed on a smart phone, a tablet computer, or a portable operating tool.

27 . The method of claim 18 , wherein the ACTUAL identification data are calculated based on a super hash value, wherein the super hash value is determined from the hash value of the firmware of the field device and from the identification data of the at least one unique authentic identification feature of the field device or of the component of the field device, incorporating the serial number of the field device, and incorporating a first predetermined algorithm.

28 . The method of claim 27 , wherein a master hash value is calculated from the hash value of the firmware and the serial number of the field device with the assistance of a second predetermined algorithm, wherein the identification data are determined based on the master hash value.

29 . The method of claim 28 , wherein the master hash value is computationally linked to the data generated by a selected field device via a third predefined algorithm, so that the data are uniquely identified as data of the selected field device, wherein the data generated by the selected field device includes measurement data, control data, status data, diagnostic data, and/or historical data.

30 . The method of claim 29 , wherein the master hash value is linked to a nonce.

Assignees

• Endress Hauser Se Co Kg

Inventors

• Spanke Dietmar
• Fink Nikolai
• Gunzert Michael
• Kaiser Ulrich
• Mousko Dimitri

Classifications

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• G06F21/64

  Protecting data integrity, e.g. using checksums, certificates or signatures · CPC title

• H04L63/12 Primary

  Applying verification of the received information (cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32) · CPC title

• G06Q20/065

  using e-cash · CPC title

• H04L67/104

  Peer-to-peer [P2P] networks · CPC title