Method for secure operation of electronic consumption data module and consumption data module

Abstract

The present invention relates to a method for operating an electronic consumption data module (1), wherein consumption data is transmitted to a receiver via a communication system and different keys (S 1‑n ) is provided for different software authorizations, characterized in that the command authorization is defined as a software authorization in the consumption data module (1). The invention also relates to a consumption data module (1) having a memory (14), a control and / or regulation unit (15), a communication device (11) for consumption data transmission, and in which different keys (S 1‑n ) is provided for different software authorizations, characterized in that the command authorization is defined as a software authorization in a consumption data module (1), and the consumption data module (1) is in particular operable by a method according to at least one of the method claims.

Description

Technical Field

[0001] The invention relates to a method for operating an electronic consumption data module. The invention also relates to a consumption data module. Background Art

[0002] The transmission of data from measuring units, such as sensors, consumption meters or components of smart home controllers, is becoming increasingly important in everyday use. An important field of application for measuring units is the use of intelligent consumption meters, also called smart meters. These are typically consumption meters that are incorporated into a supply network, such as that of energy, electricity, gas or water, which indicate the actual consumption to the respective connected user and transmit the consumption data to the supplier using a communication network. Intelligent consumption meters offer the following advantages: manual meter readings are no longer necessary and shorter billings can be implemented by the supplier based on the actual consumption. Shorter reading intervals in turn enable a more precise link between end-customer pricing for electricity and the development of transaction prices. The supply network can also be utilized substantially more efficiently.

[0003] Typical consumption meters usually transmit the accumulated data in the form of data packets or data messages via a radio communication link, for example in the SRD (Short Range Device) or ISM (Industrial, Scientific, Medical) frequency range. A data message usually consists of several data packets. The SRD or ISM frequency ranges offer the advantage that they are unlicensed and only require a general license from the frequency authorities for use.

[0004] Electronic consumption meters with radio transmitters for wireless data transmission are often used for reading on foot, on foot, on drive-by or on fly-by. For this purpose, the measuring device is read by the customer service staff in the vehicle (on drive-by) or on foot (on foot) via a mobile radio receiver, without having to enter the building. In the case of intelligent consumption meters, since these meters are mainly battery-controlled and are intended to have the longest possible maintenance intervals, energy consumption (on the one hand) and operational reliability (on the other hand) are of decisive importance. In the above-mentioned reading method, radio messages are transmitted frequently throughout the year, which are very short to save energy, making frequent transmissions over long periods of time possible.

[0005] Smart metering facilities are increasingly used to record consumption data. In these metering facilities (consumption data recording systems), consumption meters represent terminal devices by which consumption data is captured at the measurement point. The measurement data is digitally transmitted from the consumption meters to a higher-level management system or front-end system. The front-end system manages the consumption data and communicates with the consumption meters. Smart metering facilities can include a large number of consumption meters. A simultaneous direct communication connection from all consumption meters to the front-end system is often not possible because there are not enough communication devices available or the transmission bandwidth is too narrow. However, a data collection device called a data collector is used so that the data recorded and transmitted by the consumption meters can be transmitted to the front-end system as reliably and losslessly as possible. Data collectors are arranged in the communication path between the consumption meters and the front-end system. They collect the consumption data transmitted by the consumption meters on the communication path and serve as a buffer memory until the consumption data stored by them is retrieved by the front-end system. Data collectors can also perform additional tasks, such as performing status queries in the consumption meters and providing information and program code to the consumption meters, such as firmware and software updates and communication plans. The consumption meters can be configured in the measuring installation via a wireless communication link using a wireless key.

[0006] The closest prior art

[0007] In DE 10 2015 107 210 A1, a method and an interface device for transmitting measured values ​​from a consumption meter via a radio interface are described, wherein different coupling keys or read keys are provided for different user profiles. Different access authorizations can be assigned to the user profiles in the interface device. However, the user profiles only grant different read rights with respect to the consumption meter. No write permissions or configuration facilities are provided. The determination of new coupling keys is also described. Summary of the invention

[0008] Purpose of the Invention

[0009] The object of the invention is to provide a new method for operating a consumption data module and a consumption data module, wherein increased operating flexibility is achieved with reduced maintenance intensity and at the same time advantageous energy efficiency.

[0010] Goal Achievement

[0011] The above objects are achieved by a method of operating an electronic consumption data module according to the present disclosure and by a consumption data module according to the present disclosure. Suitable designs of the invention are described in the present disclosure.

[0012] According to the invention, a method for operating an electronic consumption data module is provided, wherein consumption data are transmitted to a receiver and different keys are provided for different software authorizations, wherein the command authorizations are defined in a characterized manner as software authorizations in the consumption data module.

[0013] In encryption technology or cryptography, a key is a variable value used with an algorithm, for example, to encrypt or decrypt a string. Keys and / or certificates are also used for authentication, verification and / or control of privileged access. The key used can be, for example, a key for an asymmetric encryption method such as the RSA method. The RSA method can be used for encryption and / or for digital signatures. This article uses a key pair consisting of a private key and a public key. Data can be decrypted with a private key and / or signed with a private key, while data can be encrypted with a public key and / or a signature can be verified with a public key. For this purpose, the private key is kept secret. Therefore, a key can also be a key pair.

[0014] If the command authorization is defined by a software authorization in the consumption data module, the user can only execute commands within the limits of his authorization. For example, a command may be a read request so that, for example, a network provider is given read access to more detailed data than the end consumer. For commands with write requests for configuration values ​​(in particular for metering characteristics), it is particularly important in terms of security to verify the relevant software authorization in the consumption data module before executing said command.

[0015] The method is advantageously suitable for battery-operated, preferably long-term battery-operated consumption data modules. Due to the limited facilities of the consumption data modules, the implementation of different software licenses on battery-operated systems, in particular on embedded systems, presents particular challenges. Advantageously, the method does not lead to an increase in energy consumption in the consumption data module.

[0016] Facilities conveniently exist to protect the metering characteristics of the consumption data module by means of a software license.

[0017] The metrological characteristics may conveniently include the following characteristics, either individually or in combination: measurement, calibration and / or adjustment. Consumption meters usually have a metering unit which records the flow rate of a medium (e.g. water, electricity or gas) and outputs the value of the flow rate according to its calibration. Calibration specifies the determination of the relationship between the output value of the metering unit and the associated value of the measured quantity defined by a standard under predetermined conditions. A standard is a metrological reference item, a reference material or a precision measuring device used to calibrate other measuring devices. The standard with the highest accuracy is called a primary standard, which, according to internationally valid definitions, is subject to the lowest possible uncertainty according to the current state of the art. The units of the International System of Units (SI) are therefore uniformly available worldwide and thus form a legally binding basis in the legal metrology of the corresponding physical quantities. In order to ensure compliance with legal requirements in commercial transactions, consumption meters or their metering units are calibrated. Calibration is a check imposed by the legislator for compliance with basic statutory calibration regulations, such as calibration error limits. Calibration is performed by calibration offices and nationally recognized inspection bodies. Calibration is therefore the legally required calibration of measuring equipment, which may be referred to national standards. In adjustment, intervention is made to the consumption data module in order to set the consumption data module to a target value. The target value is predetermined by means of a standard part. The consumption data module is adapted, for example, by means of an adjustment screw or by means of an electrical adjustment facility. Adjustment therefore represents a permanent intervention in the consumption data module.

[0018] The metering characteristics of the consumption data module can advantageously be stored in a metering unit in the consumption data module. The metering unit can be protected by corresponding hardware device security and (for example) sealed by a calibration office. Access to the metering characteristics of the consumption data module is advantageously no longer only protected by corresponding hardware device security, but can further be regulated by software authorization. In addition, it is also conveniently possible to distinguish between individual users of the consumption data recording device by means of software authorization. Possible user groups include, for example, end consumers, measuring point operators, network providers, technical service providers, manufacturers and / or calibration institutions.

[0019] It is particularly convenient if the software authorization includes write permission. This provides facilities for individually defining write permission for each user. For example, the end consumer is conveniently not granted write permission for the consumption data module, but only granted read rights. Write permission can be granted to measuring point operators, network providers, technical service providers and / or calibration agencies, where these write permissions can in turn be configured with different scopes. Write permission for less critical functions (such as the setting of the transmission interval for consumption data) can be granted to multiple user groups. In contrast, critical functions (such as assigning software authorizations to users) are reserved only for highly trusted user groups. For example, manufacturers and / or calibration agencies can be referred to as trusted user groups. Access to the metering characteristics of the consumption data module is conveniently available only to trusted user groups.

[0020] A radio communication system, a wired and / or optical communication system is conveniently provided as a communication system. The use of software authorization is not limited by the type of communication system. The key for a specific authorization (such as the clearing of an alarm) is independent of the communication system and can therefore be used through any given communication interface. An optical communication system can be provided, for example, for local communication, i.e. communication directly on the consumption data module. A radio communication system and / or a wired system (such as an M-bus interface) can be used for remote access to the consumption data module. Increased security requirements can be imposed on the consumption data module by remote access facilities via a radio link (e.g. via a wireless M-Bus). It is known to use radio keys to protect transmissions via radio links. However, known radio keys do not provide separate protection for data or configuration data transmitted via radio links themselves. In addition, the commands to be executed in the consumption data module are not specifically authorized, so all data and each command can generally be accessed in the consumption data module with knowledge of the radio key.

[0021] At least one key can advantageously be used to protect the radio transmission. Thus, the need for a separate radio key is eliminated. Authorization for the radio transmission can be provided, for example, by a corresponding key for software authorization. The key for protecting the radio transmission can be distinguished from the known radio key, since it regulates not only access via the radio link, but also internal access to different functions or lower hierarchy levels.

[0022] At least one key for software authorization can also be conveniently used to protect data or configuration data during radio transmission. Configuration data specifies any type of data generated and managed by an application. Configuration data can include, for example, configuration files, user data, settings, status and / or logs. For example, the key can be used for encoding and decoding of cryptographic encryption methods.

[0023] The at least one key for software access authorization can be selectively notified to the information recipient. The information recipient can advantageously be a highly trusted party. It is particularly appropriate if the key for software access authorization with respect to the metering characteristics is known to the relevant calibration authority and / or comparable neutral authority. Alternatively, the key for software access authorization with respect to the metering characteristics can also be exclusively known only to the relevant calibration authority and / or comparable neutral authority. Thus, legal compliance of the calibration in the consumption data module can be ensured in a simple manner.

[0024] If a command is transmitted to the consumption data module without a key providing authorization for the command, the command is conveniently not executed, thereby ensuring that only commands originating from trusted sources are executable.

[0025] The consumption data module can advantageously generate an error signal in the event of an unauthorized command. For example, if a metering feature of the consumption data module is accessed with an unauthorized key, an error can be transmitted back together with a message that insufficient authorization was provided.

[0026] By logging and storing unauthorized access to the metering data, in particular by storing the metering data in a non-erasable memory, manipulation of the metering data can be demonstrated in a simple manner. For example, the non-erasable memory can be a calibration log. Unauthorized access to the metering data can be indicated by the consumption data module, for example by a symbol in the display (e.g. a balance symbol) and / or a status bit in the radiotelegram, from which manipulation can be detected even after a long time (e.g. after one year).

[0027] A consumption data module may conveniently have a single identifier. Thus, a consumption data module may be distinguished from other consumption data modules.

[0028] In case of a single identifier of a consumption data module, at least one key from the set of keys may advantageously be valid for software authorization. In case of different consumption data modules with different identifiers, the keys may not have validity, so that a key of a first consumption data module does not grant software authorization with respect to this second consumption data module. The number of possible keys per consumption data module for software authorization is not limited.

[0029] For example, in one design, each consumption data module can provide five separate keys. For example, one of these keys can be used to protect wireless transmissions, and four of the keys are used for software authorization.

[0030] In case of frequent repetitive transmission of consumption data with the same key, an attacker can determine the key by a sufficiently large number of intercepted consumption data. In order to prevent attacks on the key, the validity of the key used for software authorization can conveniently be time-limited. In addition, for example, software authorization can also be granted to keys on different consumption data modules. For this purpose, keys valid for multiple consumption data modules can have a time-limited validity, so that the public key is updated periodically, for example once every quarter of an hour. This type of public software authorization can be a clock service.

[0031] Since the scope of the software authorization for a key is individually configurable, different rights can easily be granted to different users or user groups on the consumption data module.

[0032] The consumption data module can conveniently be a consumption meter or a consumption data radio module. The consumption data radio module can be, for example, a radio module which transmits meter data, in particular consumption data. Different keys are provided in the consumption data radio module for different software authorizations.

[0033] The invention further describes a consumption data module. The consumption data module according to the invention comprises a memory, a control and / or regulation unit and a communication device for the transmission of consumption data. Furthermore, different keys are provided for different software authorizations, wherein the command authorization is defined in a characteristic manner as a software authorization in the consumption data module, and the consumption data module can (in particular) be operated by a method according to at least one of the method claims.

[0034] The consumption data module may advantageously comprise a battery, preferably a battery designed for long-term operation. Thus, the consumption data module can be operated as an embedded system independently of an external energy source. Batteries designed for long-term operation may advantageously be used to ensure that the system can operate autonomously and, for example, to extend the necessary maintenance intervals.

[0035] The facility for the consumption data model advantageously exists to include a metering measurement unit for recording the consumption data. The metering measurement unit can advantageously be protected by a software license.

[0036] The metering characteristics of the consumption data module can conveniently be stored in the metering measurement unit. Known consumption data modules, such as consumption meters, protect access to the metering measurement unit by hardware protection and / or calibration seals. According to the invention, access to the metering measurement unit can advantageously be protected by software protection. In addition to hardware access, for example, facilities for software access to the metering characteristics of the consumption data module can be provided.

[0037] In an alternative design, access to the metrological measuring unit can only be protected by software protection. For example, hardware access can be prevented by the manufacturing process, whereby the metrological measuring unit is hardware-encapsulated, for example, during production. In this design, the metrological characteristics and thus the calibration of the consumption data module can only be accessed by software authorization.

[0038] The consumption data module can conveniently include a module for managing keys for software authorization. For example, this module can be connected downstream of the communication device so that access to the remaining modules of the consumption data module can be monitored and controlled. Thus, for example, access to a memory, a control and / or regulation unit or a processor and a metering measurement unit can be regulated. The module for managing keys can preferably be configured as a hardware and / or software component.

[0039] The communication means may advantageously comprise radio communication means, wired communication means and / or optical communication means.

[0040] Furthermore, facilities also exist to protect radio transmissions using keys. Thus, such keys may include the functionality of radio functions or transport keys. Radio or transport keys are primarily used to protect data transmissions via the radio path.

[0041] Alternatively or in addition, facilities exist to protect the configuration data using keys. Access to these data in the consumption data module can advantageously be regulated and managed by keys used for software authorization. For example, read and / or write permissions can be granted or denied to a user or user group with respect to specific configuration data.

[0042] Facilities are conveniently present to selectively inform the information recipient of the key for software access authorization. Access rights to the metering measurement unit of the consumption data module can be conveniently granted to the relevant calibration authority and / or comparable neutral authority through the key for software authorization. Alternatively, access rights can be granted only to the relevant calibration authority and / or comparable neutral authority.

[0043] The consumption data modules can advantageously have individual identifiers. One consumption data module can be distinguished from other consumption data modules by the individual identifier. If a consumption data module jointly transmits its identifier during a radio transmission, data originating from the consumption data module, in particular consumption data, can be assigned to the correct consumption data module. The identifier can be stored in the communication module, with the result that the outgoing radio transmission can be provided with the identifier. With regard to received transmissions, a check can be performed in the communication module (for example using the jointly transmitted identifier of the target consumption data module) to determine whether these messages are intended for the corresponding consumption data module. Furthermore, facilities exist for the key management module to check the jointly transmitted identifier for authorization and the key for command authorization. If the key used is not authorized for the corresponding identifier of the consumption data module, the key can be recognized as invalid and, for example, the command execution can be rejected.

[0044] By imposing a time limit on the validity of the key used for software authorization, the security of the consumption data module can be increased in a simple manner. When the validity period of the key expires, a new key can be generated, for example, in the consumption data module, for example in the key management module. For example, an algorithm can be stored, by which a new valid key can be calculated. For example, facilities exist to generate new keys based on the keys that have been valid so far. In addition or alternatively, for example, facilities exist to generate new keys outside the consumption data module (preferably in a secure environment). The keys generated in this way outside the consumption data module can (for example) be securely transmitted to the consumption data module. This depends on the following condition: the situation outside the consumption data module has the necessary generation rights and / or the necessary access rights to transmit the new key in the consumption data module.

[0045] The scope of software authorizations for keys can advantageously be individually configurable. For example, information indicating which keys have which authorizations can be stored in a key management module. The key management module can thus decide, for example, which requests (in particular command requests) are granted or rejected.

[0046] The memory may conveniently include a non-erasable memory. For example, the non-erasable memory may be designed as a calibration log.

[0047] The consumption data module can advantageously be a consumption meter or a consumption data radio module.

[0048] Description of the invention based on exemplary embodiments BRIEF DESCRIPTION OF THE DRAWINGS

[0049] A suitable design of the present invention is explained in detail below with reference to the figures in the accompanying drawings. In the drawings:

[0050] Figure 1 shows a simplified schematic representation of software authorization in two consumption data modules;

[0051] Figure 2 A highly simplified block diagram showing one design of a consumption data module and its components as a consumption meter;

[0052] Figure 3 A simplified flow chart for software authorization in the consumption data module is shown. DETAILED DESCRIPTION

[0053] Figure 1 A simplified schematic representation of two designs of a consumption data module as a consumption meter 1a-1b is shown, and the consumption meter 1a-1b has a plurality of different software authorizations. By way of example, the software authorizations are "read", "command", "write" and "metering". "Read" represents read access to the data of the consumption meter 1a or 1b. The readable data may include consumption data, configuration data and / or other consumption meter-related data. The facility also exists to configure further authorization levels within the read access to the consumption meter 1a-1b. For example, the end consumer may only be interested in read access to the consumption data. The end consumer may adjust his consumption based on the consumption data to minimize his expenditure. On the contrary, the end consumer may not be interested in read access to the configuration data of the consumption meter 1a-1b, so that these rights cannot usually be granted to the end consumer, wherein the configuration data may include, for example, a transmission interval for transmission to a hierarchically superior data collector.

[0054] The "Command" software authorization relates to the right of command authorization in the consumption meter 1a-1b. The "Write" software authorization relates to write access to the consumption meter 1a-1b. There may be further authorization levels in the write access rights. The write permission in the configuration data of the consumption meter 1a-1b may relate, for example, to the transmission interval of the consumption data and / or to the format of the consumption data itself. Figure 1 In the context of the present invention, "Metering" is used as a software authorization level, which is related to the access authorization regarding the metering characteristics of the consumption meter. The access rights may include a read right that allows, for example, to read out the current calibration of the consumption meter. Furthermore, the access rights may also include a write permission that allows, for example, to change the calibration of the consumption meter. Such intervention in the ongoing operation is reserved only for the relevant calibration agency and / or a comparable neutral agency. The calibration agency may calibrate the consumption meter by adjusting the calibration.

[0055] The keys S1 and Sa2-Sb4 authorize access to different functions in the consumption meters 1a-1b. Thus, S1 allows read access in both the consumption meters 1a and 1b. Since the consumption meters 1a-1b have individual identifiers and the authorization of the keys Sa2-Sb4 depends on the individual identifiers, the keys Sa2-Sa4 do not allow read access in the second consumption meter 1b. Similarly, the keys Sa2-Sb4 only grant access to the first consumption meter 1a, but not to the second consumption meter 1b. However, the keys Sa2-Sa3 additionally have command authorization rights or write permissions for the consumption meter 1a. The key S1 can be provided, for example, to an end consumer who has multiple consumption meters, so that the end consumer can read out two consumption meters 1a-1b with one key S1. The keys Sa2 and Sa3 or Sb2 and Sb3 can be provided based on command authorization rights or write permissions, for example for measuring point operators, network providers, technical service providers and / or manufacturers. The keys Sa4 and Sb4 are equipped with additional "metering" rights. For example, a user with the key Sa4 can modify the calibration of the metering measuring unit 13 of the consumption meter 1a. This facility to intervene in the core system of the consumption meter 1a is only available to highly trusted users. Usually only relevant calibration institutions or comparable neutral institutions are trusted users of this type.

[0056] Thus, the keys Sa2-Sa4 only grant access to the functions of the first consumption meter 1a, while the keys Sb2-Sb4 similarly only allow access to the functions of the second consumption meter 1b. Conversely, the keys Sa2-Sa4 are excluded from the access rights to the second consumption meter 1b, and the keys Sb2-Sb4 are similarly excluded from the access rights to the first consumption meter 1a.

[0057] Figure 2A highly simplified block diagram of one design of a consumption data module as a consumption meter 1 is shown. The consumption meter 1 comprises an electronic module 10 and a connection housing 8. The electronic module 10 in turn comprises an antenna 2, a communication module 11, a key management module 12, a metering unit 13, a memory 14, a processor 15 and a battery 16. The consumption meter 1 shown is a water meter designed as an ultrasonic flow meter. An ultrasonic measurement path 7 is accommodated in the connection housing 8. The connection housing 8 has an input 3 and an output 4 for a water connection. The flow direction of the flowing medium is indicated by arrows at the input 3 and the output 4. The measuring device of the consumption meter 1 is shown taking two ultrasonic transducers 5a and 5b as an example. The path of the ultrasonic signal is redirected to a U-shaped measurement path 7 at reflectors 6a and 6b. A section of the measurement path 7 runs parallel to the flow direction of the flowing medium. The components in the electronic module 10 are coupled to the components of the connection housing 8 via the connection of the metering unit 13 to the ultrasonic transducers 5a, 5b. The metering unit 13 records the flow velocity or flow of the medium according to the calibration.

[0058] The key management module 12 is connected downstream of the communication module 11. Requests via the radio link are received by the communication module 11 and forwarded to the key management module 12. The key management module 12 monitors the keys or authorizations for requests issued by the consumption meter 1. The memory 14 comprises a non-erasable memory 14a, which is designed as a calibration log. Unauthorized access to metering data or manipulations and attempts to manipulate metering data are recorded and stored in the non-erasable memory 14a.

[0059] Figure 3 A flow chart for software authorization in a design of a consumption module as a consumption meter is shown, wherein different keys S are used. 1-n When a message is received via the radio link, in a first step the validity of the radio key is verified in the consumption meter 1. If the key is no longer valid, the connection to the remote station is not established. The radio key can simultaneously be the key S for software authorization. 1-n Depending on the type of data that is intended to be accessed in the consumption meter 1, a distinction is made, for example, between consumption data, configuration data and metering data. Consumption data are, for example, recorded consumptions, such as the amount of water consumed in the case of a water meter. Configuration data may, for example, comprise settings for transmission intervals for consumption data. Metering data describe, for example, calibration or measurements of the consumption meter. In a next step, based on the key S used for the request, 1-nVerify the read or write permission for the selected data type. If read rights exist, the required data is output; in the case of write permission, the jointly transmitted data or command is input. Conversely, if there is no authorization for the desired data type or insufficient read or write permission, the request is not executed. In this case, an error signal is then generated and transmitted back via the radio link.

[0060] Reference Numbers List

[0061] 1, 1a, 1b consumption data module

[0062] 2 Antenna

[0063] 3 Input

[0064] 4 outputs

[0065] 5a, 5b Ultrasonic transducer

[0066] 6a, 6b reflectors

[0067] 7 Measurement Paths

[0068] 8Connection housing

[0069] 10 electronic modules

[0070] 11 Communication Module

[0071] 12Key Management Module

[0072] 13. Metrology and measurement unit

[0073] 14 Memory

[0074] 14a Non-erasable memory

[0075] 15 processors

[0076] 16 batteries

[0077] S 1-n Key

[0078] S1 Key for reading entitlements

[0079] S2 key for command authorization

[0080] S3 key for writing permissions

[0081] S4 key for metering characteristics

[0082] S5 Key used to protect radio transmissions

[0083] S6 Key used to protect configuration data

Claims

1. A method for operating an electronic consumption data module, The consumption data is transmitted to the receiver via the communication system. Different keys are provided for different software licenses, and The command authorization for the metering characteristics of the consumption data module is defined as a software authorization in the consumption data module, characterized in that The metering characteristics of the consumption data module are protected by a software authorization and include the following metering characteristics: measurement and calibration, and the software authorization includes write permission to the metering characteristics.

2. The method according to claim 1, characterized in that A radio communication system, a wired and / or optical communication system is provided as the communication system.

3. The method according to claim 1, characterized in that At least one key is used to protect the configuration data.

4. The method according to claim 1, characterized in that At least one key for software access authorization is selectively notified to the information recipient.

5. The method according to claim 1, characterized in that Commands transmitted to the consumption data module without a key providing authorization for the command cannot be executed by the consumption data module.

6. The method according to claim 1, characterized in that Unauthorized access to metering data is logged and stored.

7. The method according to claim 1, characterized in that The consumption data module has a single identifier.

8. The method according to claim 1, characterized in that The validity of the key used for software authorization is time-limited.

9. The method according to claim 1, characterized in that The scope of software authorization for a key can be configured individually.

10. The method according to claim 1, characterized in that The consumption data module is a consumption meter or a consumption data radio module.

11. The method according to claim 1, characterized in that The consumption data module is battery operated.

12. The method according to claim 1, characterized in that The consumption data module is long term battery operated.

13. The method according to claim 2, characterized in that At least one key is used to protect the radio transmission.

14. The method according to claim 5, characterized in that In the event of an unauthorized command the consumption data module generates an error signal.

15. The method according to claim 6, characterized in that Unauthorized access to metering data is logged and stored in non-erasable memory.

16. The method according to claim 7, characterized in that In case of an individual identifier of the consumption data module, at least one key from the set of keys is valid for the software authorization.

17. The method of claim 1, wherein The metering characteristics also include adjustments.

18. A consumption data module, comprising: Memory, control and / or regulation unit, a communication device for transmission of consumption data, and Different keys are provided for different software licenses, and wherein the command authorization of the metering characteristic of the consumption data module is defined as the software authorization in the consumption data module, It is characterized in that The metering characteristics of the consumption data module are protected by a software authorization and include the following metering characteristics: measurement and calibration, and the software authorization includes write permission to the metering characteristics.

19. The consumption data module according to claim 18, characterized in that The consumption data module includes a battery.

20. The consumption data module according to claim 18 or 19, characterized in that The consumption data module comprises a metering and measuring unit for recording consumption data.

21. The consumption data module according to claim 18 or 19, characterized in that The consumption data module includes a module for managing keys for software authorization.

22. The consumption data module according to claim 18 or 19, characterized in that The communication device includes a radio communication device, a wired communication device and / or an optical communication device.

23. The consumption data module according to claim 18 or 19, characterized in that At least one key is used to protect the configuration data.

24. The consumption data module according to claim 18 or 19, characterized in that At least one key for software access authorization is selectively notified to the information recipient.

25. The consumption data module according to claim 18 or 19, characterized in that The consumption data modules have individual identifiers.

26. The consumption data module according to claim 18 or 19, characterized in that The validity of the key used for software licensing is limited in time.

27. The consumption data module according to claim 18 or 19, characterized in that The scope of software authorization for a key can be configured individually.

28. The consumption data module according to claim 18 or 19, characterized in that The memory includes a non-erasable memory.

29. The consumption data module according to claim 18 or 19, characterized in that The consumption data module is a consumption meter or a consumption data radio module.

30. The consumption data module of claim 19, characterized in that The consumption data module includes a battery designed for long term operation.

31. The consumption data module of claim 20, characterized in that The metrology measurement unit is protected by a software license.

32. The consumption data module of claim 20, wherein The metrological characteristics of the consumption data module are stored in the metrological measurement unit.

33. The consumption data module of claim 21, characterized in that The modules are configured as hardware and / or software components.

34. The consumption data module of claim 22, wherein At least one key is used to protect the radio transmission.

35. The consumption data module of claim 18, characterized in that The metering characteristics also include adjustments.

Images