Securing communication within a communication network using multiple security functions

    公开(公告)号:US11336657B2

    公开(公告)日:2022-05-17

    申请号:US16610937

    申请日:2018-05-09

    摘要: The invention relates to a communication network having at least one network element (NE), via which data associated with the communication are conducted. The method comprises the following steps: securing, by means of a first cryptographic security function, the data (D) that are transferred from at least one first communication device (PLC1) to at least one second communication device (PLC2), providing a second cryptographic security function, which secures, between a communication device and a network element, messages that are conducted from the first communication device to the at least second communication device via the at least one network element and that contain the data, providing a checking function by means of the at least one network element, which checking function checks the authenticity and/or integrity of the messages on the basis of the second security function, continuing (6) or stopping (5) the communication in accordance with the result of the check (4) by the checking function, wherein, if the communication is continued, the data remain secured by means of the first security function until the data are received by the at least second communication device.

    Device for use in a network
    5.
    发明授权

    公开(公告)号:US10951622B2

    公开(公告)日:2021-03-16

    申请号:US15769913

    申请日:2015-10-22

    IPC分类号: H04L29/06 H04L29/08 H04W12/00

    摘要: A method and device are provided for use in a network including at least one existing device. At least one virtual sub-network is established within the network and a certain trust level is assigned to the at least one virtual sub-network. The device is assigned a first trust level. The device receives a token correlated with the assigned first trust level. The device is permitted into the at least one virtual subnet upon presentation of that token if the first trust level corresponds or includes the certain trust level.

    DEVICE UNIT SUITABLE FOR OPERATION IN A PROTECTED AND/OR OPEN OPERATING STATE AND ASSOCIATED METHOD

    公开(公告)号:US20200089890A1

    公开(公告)日:2020-03-19

    申请号:US16466869

    申请日:2017-10-10

    IPC分类号: G06F21/57

    摘要: Provided is a device unit, including a module, which can configure the device unit with an operating state from among different operating states during the start-up process and/or during ongoing operation of the device unit, wherein a first protected operating state of the different operating states is designed to allow the execution of at least one operating process which can be predefined and to optionally protect the operating process by means of defined cryptographic means, wherein at least one second operating state of the different operating states is designed to deactivate the first protected operating state and to allow at least one other changeable operating process and to optionally protect the operating process by means of specifiable cryptographic means.