Method for determining whether a measurement system is used in a valid state

Abstract

A method for determining whether a measurement system comprising a plurality of measurement system components is used in a valid state, comprising automatically reading a plurality of information items, automatically obtaining information about current operating environmental conditions of the measurement system, automatically reading reference information items identifying measurement system components and / or representing one or more characteristics of measurement system components and information about reference operating environmental conditions, and comparing the read information items identifying measurement system components and / or representing one or more characteristics of measurement system components with the reference information items identifying measurement system components and / or representing one or more characteristics of measurement system components and checking whether the current operating environmental conditions comprise allowed values or are within allowed ranges defined by the information about reference operating environmental conditions, in order to determine whether the measurement system comprising a plurality of measurement system components is used in a valid state. The method provides for a more efficient control of the measurement system operation and avoids unknown effects of environmental conditions.

Description

Technical Field

[0001] Embodiments of this application relate to protecting a measurement system from being used in an invalid state, particularly by determining whether the measurement system is currently being used in an effective state.

[0002] According to embodiments of the present invention, there is a method for determining whether a measurement system comprising multiple measurement system components is in an effective state for use.

[0003] According to another embodiment of the invention, there is a method for supporting the determination of whether a measurement system comprising multiple measurement system components is in an effective state for use.

[0004] According to another embodiment of the invention, there is a method for controlling the operation of a measurement system comprising a plurality of measurement system components, wherein the method includes determining whether the measurement system comprising the plurality of measurement system components is in an effective state and supporting the indicated determination.

[0005] According to another embodiment of the present invention, there is a measurement system comprising a plurality of measurement system components.

[0006] According to another embodiment of the invention, there is a computer program for performing methods for protecting a measurement system from unauthorized alteration and for checking the integrity of the measurement system.

[0007] This invention can be applied to protect calibration equipment used for calibrating production equipment. Background Technology

[0008] Several methods are currently known for determining whether a measurement system is in a valid operating state.

[0009] However, known methods typically rely on manual checks of the coherence measurement system and the calibration status of the system and its individual components. The results of these methods are often highly dependent on human factors, as well as the completeness of information in the traceability documentation of the measurement equipment used. Not all necessary parameters are considered when determining whether a measurement system is in a valid state. This leads to measurement errors due to system incompleteness, incorrect calibration, or parameters not considered critical.

[0010] In view of the above, it is desirable to create a method that can effectively improve the reliability of a measurement system, for example, by considering all possible parameters when checking the current state of the measurement system and allowing the reporting of invalid states of the measurement system, which leads to improved operation of the measurement system.

[0011] Therefore, it is desirable to provide a more efficient concept that takes into account the efficiency of the condition check of the measurement system.

[0012] This objective is achieved through the subject matter of the pending independent claims. Summary of the Invention

[0013] According to embodiments of the present invention, a method is provided for determining whether a measurement system comprising multiple measurement system components is in an effective state. The method includes, for example, automatically reading multiple information items (e.g., uniquely identifying measurement system components, such as type identifiers and serial numbers, and / or representing one or more characteristics of the measurement system components, such as software revisions and / or calibration dates and / or calibration intervals) using a readout mechanism; automatically obtaining (e.g., by measurement, such as using a measuring device as part of the measurement system) information about the current operating environment conditions of the measurement system (e.g., temperature and / or humidity and / or electromagnetic interference); automatically reading reference information items (e.g., uniquely identifying measurement system components and / or representing one or more characteristics of the measurement system components) and information about reference operating environment conditions; and comparing the read-out information items (e.g., uniquely identifying measurement system components and / or representing one or more characteristics of the measurement system components) with the reference information items (e.g., uniquely identifying measurement system components and / or representing one or more characteristics of the measurement system components), and checking whether the current operating environment conditions include permissible values ​​or are within permissible ranges defined by the information about the reference operating environment conditions, in order to determine whether the measurement system comprising multiple measurement system components is in an effective state.

[0014] This embodiment is based on the finding that the state of the measurement system can be ensured by collecting all possible information about the measurement system and its individual components (including current environmental conditions) and taking these conditions into account when making decisions about whether the measurement system is in a valid state and can operate correctly. This allows for the avoidance of unknown effects of environmental conditions, such as excessively high or low temperatures, extreme humidity levels, and / or unknown effects of electromagnetic influences. When using the measurement system, it is possible to check whether the actual measurement conditions are consistent with the permissible operating environmental conditions.

[0015] According to one embodiment, the method further includes reporting (e.g., reporting to a user; e.g., reporting using a user interface; e.g., storing) the result of determining whether a measurement system comprising multiple measurement system components is in an effective state, such as indicating the date of the determination. The result of this determination can be used to decide whether the measurement system can be used in its current state and / or can be used as a trigger to further prevent operation of the measurement system should environmental conditions or any parameters of the measurement system or its components not allow for proper system operation.

[0016] According to one embodiment, the method further includes automatically blocking the measurement system if it is determined that the measurement system is being used in an invalid state. This allows for avoiding operation of the measurement system and minimizing measurement errors when environmental conditions or any parameters of the measurement system or its components do not allow for proper operation.

[0017] According to one embodiment, the measurement system is a calibration device configured to calibrate production equipment, such as an automated testing device. Therefore, it can be ensured that the production equipment is reliably calibrated.

[0018] According to one embodiment, the method further includes obtaining a certificate confirming that the measurement system is in a valid state for use.

[0019] According to one embodiment, obtaining the certificate is performed by the measurement system and / or by a remote server. The certificate may, for example, be issued by a remote server belonging to the manufacturer of the measurement system.

[0020] According to one embodiment, the method further includes automatically sending the result (indicating, for example, a determined date) of determining whether a measurement system comprising multiple measurement system components is in an effective state to a remote server for storage, such as a server operated by the provider (company) of the measurement system. This allows the manufacturer to control whether his measurement equipment is used under appropriate conditions and to demonstrate the reliability of the measurement equipment or equipment calibrated using the measurement equipment (or measurement system).

[0021] According to one embodiment, one or more measurement system components that lack built-in functionality for reporting, for example, information items uniquely identifying the respective measurement system component (e.g., measurement system components configured for manual reading only, not automatic reading, which are not automatically tracked; such as passive measurement system components, like cables, switches, relays, power dividers, shielding devices, connectors, adapters, etc., or older measurement devices that do not allow automatic reading of unique identifiers (such as serial numbers) via an external communication interface) are combined with an associated local storage device to enable the automatic reading of measurement system component-specific information items that identify measurement system components that do not have built-in functionality for reporting, for example, information items uniquely identifying the respective measurement system component. Combining components with local storage devices having communication interfaces allows for the automatic tracking of the status of measurement devices that are not normally automatically tracked, thereby allowing for the automatic reading of information items identifying all components of the measurement system without involving the user.

[0022] According to one embodiment, the method includes combining measurement system components that do not have built-in functionality for reporting, for example, information items that uniquely identify the corresponding measurement system components with an associated local storage device before automatically reading out information items that uniquely identify the corresponding measurement system components. This provides the ability to automatically collect parameters of all components of the measurement system simultaneously (or at least in a single processing flow) during the readout step.

[0023] According to one embodiment, a measurement system component that does not have built-in functionality for reporting information items, such as uniquely identifying the corresponding measurement system component, is inseparably combined with its associated local storage device. This allows for the replacement of the corresponding measurement system component along with the corresponding local storage device and ensures that all components can be automatically read even when the corresponding component is replaced. In particular, it prevents the replacement of measurement system components that do not have built-in functionality for reporting information items without being noticed.

[0024] According to one embodiment, a measurement system component without built-in functionality for reporting, for example, information items that uniquely identify the corresponding measurement system component is combined with a corresponding associated local storage device in such a way that the measurement system component cannot be separated from the corresponding associated local storage device without tools; or a measurement system component without built-in functionality for reporting, for example, information items that uniquely identify the corresponding measurement system component is combined with a corresponding associated local storage device in such a way that the measurement system component cannot be separated from the corresponding associated local storage device in a non-destructive manner; or a measurement system component without built-in functionality for reporting, for example, information items that uniquely identify the corresponding measurement system component is combined with a corresponding associated local storage device in such a way that the measurement system component cannot be separated from the corresponding associated local storage device without breaking the seal. This reliably prevents the measurement system component without built-in functionality for reporting information items from being replaced without notice of the change, as a significant effort is required to relocate the local storage device.

[0025] According to one embodiment, at least one measurement system component, lacking built-in functionality for reporting information items that uniquely identify the respective measurement system component, is glued to a corresponding local storage device. This is a particularly effective solution to prevent unauthorized replacement of measurement system components.

[0026] According to one embodiment, at least one measurement system component, lacking built-in functionality for reporting, for example, information items that uniquely identify the respective measurement system component, is arranged in a separate housing (e.g., a box, or, for example, a cover) with a local storage device. Thus, a separate hardware unit with a communication interface is provided, comprising the measurement system component and the local storage device with the communication interface.

[0027] According to one embodiment, one or more of the corresponding local storage devices are one of the following: a USB storage device, a network-attached storage device, preferably a wired LAN device, or an RFID tag. These storage devices are merely some examples of storage devices that can be used. Any other storage device may be used in other embodiments.

[0028] According to one embodiment, one or more measurement system components that do not have built-in functionality for reporting information items that uniquely identify the respective measurement system components include one or more (e.g., active) measurement devices, such as those configured to report measurement results to, for example, a measurement system controller via an external interface. In particular, older measurement devices without communication interfaces may be used.

[0029] According to one embodiment, one or more measurement system components that do not have built-in functionality for reporting information items that uniquely identify the respective measurement system components include one or more passive measurement system components, such as signal path components, passive switches, relays, attenuators, connectors, adapters, cables, sensors, etc. For example, reading information from the memory attached to these passive measurement system components allows tracking the state of the measurement system as a whole and taking into account any fluctuations, such as voltage and resistance in the connections between components. Changes in passive components that could degrade system performance become detectable.

[0030] According to one embodiment, one or more measurement system components that do not have built-in functionality for reporting information items that uniquely identify the corresponding measurement system components include one or more of the following measurement system components: signal path components, coupling components, couplers, adapters, and cables. Therefore, changes to such components that could degrade system performance become detectable.

[0031] According to one embodiment, one or more measurement system components that do not have built-in functionality for reporting, for example, information items that uniquely identify the corresponding measurement system component include one or more of the following measurement system components: thermodynamic components, fixed power supply components, antennas, shielding housing components, cooling components, such as fans, for example, determining the aerodynamic characteristics of the fans. Therefore, changes in such components that would degrade system performance become detectable.

[0032] According to one embodiment, the method includes automatically reading from a corresponding local storage device (e.g., local memory) associated with one or more measurement system components that do not have built-in functionality for reporting, for example, information items that uniquely identify the corresponding measurement system components.

[0033] According to one embodiment, one or more characteristics of the measurement system components include the wear condition of at least one of the measurement system components. This allows for determining whether all components of the measurement system are functioning correctly to avoid any measurement errors.

[0034] According to one embodiment, the information item identifying wear condition is the value of a counter arranged in the corresponding measurement system component, wherein the counter is incremented by one each time the corresponding measurement system component is used (or, generally, the value is incremented or decremented for each use or change in state of the corresponding measurement system component). Therefore, the memory associated with the corresponding measurement system component is reused to also track the wear of the corresponding measurement system component. By examining the wear information, anticipated unreliability of the measurement system can be identified.

[0035] According to one embodiment, the method further includes performing self-estimation, such as measuring one or more parameters of the corresponding measurement system component, for example, resistance measurement for a relay, to determine the wear condition of the corresponding measurement system component. Therefore, the reliability of the measurement system can be improved by detecting fault conditions in the measurement system.

[0036] According to one embodiment, the information regarding current operating environmental conditions and the information regarding reference operating environmental conditions includes humidity and / or temperature and / or electromagnetic interference. This allows for the avoidance of unknown effects of environmental conditions, such as excessively high or low temperatures, extreme humidity levels, and / or unknown effects of electromagnetic influences. When using the measurement system, it can be checked whether the actual measurement conditions are consistent with the permissible operating environmental conditions.

[0037] An embodiment of the present invention provides a method for supporting the determination of whether a measurement system comprising multiple measurement system components is in an effective state for use. The method includes, for example, automatically reading multiple information items (e.g., uniquely identifying measurement system components, such as type identifiers and serial numbers, and / or indicating one or more characteristics of the measurement system components, such as software revisions and / or calibration dates and / or calibration intervals) using a readout mechanism; obtaining (e.g., reading from a user interface or from memory associated with the measurement system components) (e.g., collecting, e.g., automatically obtaining) information about permissible (e.g., optimal) operating environmental conditions of the measurement system, such as permissible temperature ranges and / or permissible humidity ranges and / or permissible maximum electromagnetic interference used by the manufacturer in calibrating the measurement system, or deviations from environmental conditions used in calibrating the measurement system not exceeding permissible tolerances; and storing the information items identifying the measurement system components and / or indicating one or more characteristics of the measurement system components, as well as the information about permissible (e.g., optimal) operating environmental conditions, for use in determining whether the measurement system comprising multiple measurement system components is in an effective state for use.

[0038] This embodiment is based on the finding that the appropriate operating state of a measurement system can be defined by collecting and storing all possible information about the measurement system and its individual components (including permissible environmental conditions) to support decisions about whether the measurement system is in a valid state and capable of proper operation. This allows for the avoidance of unknown effects of environmental conditions, such as excessively high or low temperatures, extreme humidity levels, and / or unknown effects of electromagnetic influences. When using the measurement system, it can be checked whether the actual measurement conditions are consistent with the permissible operating environmental conditions.

[0039] According to one embodiment, the method further includes, for example, using a combiner to automatically combine readout information items (e.g., serial number, type identifier, software revision, calibration date, calibration interval, etc.) of each of multiple measurement system components into a dataset represented by summary data (e.g., a summary file). Combining information items in a single dataset simplifies the storage of information items and their comparison with reference values.

[0040] According to one embodiment, the method further includes creating a signature based on the summary data and storing the signature. This allows for improved protection of the measurement system against unauthorized alterations.

[0041] According to one embodiment, creating a signature involves signing the summary data with a private key. This improves the security of data protection. Furthermore, the integrity of the summary data can be checked using the public key, allowing for a highly reliable implementation. In particular, this concept allows any third party with access to the public key corresponding to the private key to verify integrity.

[0042] In one embodiment, the private key is a confidential private key. The confidentiality of the private key further improves the security of data protection.

[0043] According to one embodiment, the summary data and signature are stored in two separate files, such as a summary file and a signature file, or the summary data and signature are stored in a single file.

[0044] According to one embodiment, the measurement system further includes at least one local storage device, and information items identifying measurement system components and / or representing one or more characteristics of the measurement system components, as well as information about permissible (e.g., optimal) operating environmental conditions, are stored in the at least one local storage device. This allows for the provision of an automated measurement system whose state can be determined and estimated without sending its parameters to any remote server.

[0045] According to one embodiment, information items identifying measurement system components and / or representing one or more characteristics of the measurement system components are stored in a first local storage device of the measurement system, and information regarding permissible (e.g., optimal) operating environmental conditions is stored in a second local storage device of the measurement system. This allows for the provision of an automated measurement system whose state can be determined and estimated without sending the determined environmental conditions to any remote server.

[0046] According to one embodiment, one or more characteristics of the measurement system components include the wear condition of at least one of the measurement system components. This allows for determining whether all components of the measurement system are functioning correctly to avoid any measurement errors.

[0047] According to one embodiment, the information item identifying wear condition is the value of a counter arranged in the corresponding measurement system component, wherein the counter is incremented by one each time the corresponding measurement system component is used (or, generally, the value is incremented or decremented for each use or change in state of the corresponding measurement system component). Therefore, the memory associated with the corresponding measurement system component is reused to also track the wear of the corresponding measurement system component. By examining the wear information, anticipated unreliability of the measurement system can be identified.

[0048] According to one embodiment, the method further includes performing self-estimation, for example, by measuring one or more parameters of the corresponding measurement system component (e.g., resistance measurement for a relay), to determine the wear condition of the corresponding measurement system component. Therefore, the reliability of the measurement system can be improved by detecting fault conditions in the measurement system.

[0049] According to one embodiment, information regarding current operating environmental conditions and information regarding reference operating environmental conditions includes humidity and / or temperature and / or electromagnetic interference. This allows for the avoidance of unknown effects of environmental conditions, such as excessively high or low temperatures, extreme humidity levels, and / or unknown effects of electromagnetic influences. When using the measurement system, it can be checked whether the actual measurement conditions are consistent with the permissible operating environmental conditions.

[0050] According to one embodiment, one or more measurement system components that lack built-in functionality for reporting, for example, information items uniquely identifying the respective measurement system component (e.g., measurement system components configured for manual reading only, not automatic reading, which are not automatically tracked; such as passive measurement system components, like cables, switches, relays, power dividers, shielding devices, connectors, adapters, etc., or older measurement devices whose unique identifiers (such as serial numbers) are not allowed to be read via an external communication interface) are combined with an associated local storage device to enable the automatic reading of measurement system component-specific information items that identify measurement system components that lack built-in functionality for reporting, for example, information items uniquely identifying the respective measurement system component. Combining components with a local storage device having a communication interface allows for the automatic tracking of the status of measurement devices that are not normally automatically tracked, thereby allowing for the automatic reading of information items identifying all components of the measurement system without user intervention. In particular, this concept allows for the automatic detection of replacement of passive components, which may reduce the functionality of the measurement system.

[0051] According to one embodiment, the method includes combining measurement system components that do not have built-in functionality for reporting, for example, information items that uniquely identify the corresponding measurement system components with an associated local storage device before automatically reading out information items that uniquely identify the corresponding measurement system components. This provides the ability to automatically collect parameters of all components of the measurement system simultaneously (or at least in a single processing flow) during the readout step.

[0052] According to one embodiment, a measurement system component that does not have built-in functionality for reporting information items, such as uniquely identifying the corresponding measurement system component, is inseparably combined with its associated local storage device. This allows for the replacement of the corresponding measurement system component along with the corresponding local storage device and ensures that all components can be automatically read even when the corresponding component is replaced. In particular, it prevents the replacement of measurement system components that do not have built-in functionality for reporting information items without being noticed.

[0053] According to one embodiment, a measurement system component without built-in functionality for reporting, for example, information items that uniquely identify the corresponding measurement system component is combined with a corresponding associated local storage device in such a way that the measurement system component cannot be separated from the corresponding associated local storage device without tools; or a measurement system component without built-in functionality for reporting, for example, information items that uniquely identify the corresponding measurement system component is combined with a corresponding associated local storage device in such a way that the measurement system component cannot be separated from the corresponding associated local storage device in a non-destructive manner; or a measurement system component without built-in functionality for reporting, for example, information items that uniquely identify the corresponding measurement system component is combined with a corresponding associated local storage device in such a way that the measurement system component cannot be separated from the corresponding associated local storage device without breaking the seal. This reliably prevents the measurement system component without built-in functionality for reporting information items from being replaced without notice of the change, as a significant effort is required to reposition the local storage device.

[0054] According to one embodiment, at least one measurement system component, lacking built-in functionality for reporting information items that uniquely identify the respective measurement system component, is glued to a corresponding local storage device. This is a particularly effective solution to prevent unauthorized replacement of measurement system components.

[0055] According to one embodiment, at least one measurement system component, lacking built-in functionality for reporting, for example, information items that uniquely identify the respective measurement system component, is arranged in a separate housing (e.g., a box, or, for example, a cover) with a local storage device. Thus, a separate hardware unit with a communication interface is provided, comprising the measurement system component and the local storage device with the communication interface.

[0056] According to one embodiment, one or more of the corresponding local storage devices are one of the following: a USB storage device, a network-attached storage device, preferably a wired LAN device, or an RFID tag. These storage devices are merely some examples of storage devices that can be used. Any other storage device may be used in other embodiments.

[0057] According to one embodiment, one or more measurement system components that do not have built-in functionality for reporting information items that uniquely identify the respective measurement system components include one or more (e.g., active) measurement devices, such as those configured to report measurement results to, for example, a measurement system controller via an external interface. In particular, older measurement devices without communication interfaces may be used.

[0058] According to one embodiment, one or more measurement system components that do not have built-in functionality for reporting information items that uniquely identify the respective measurement system components include one or more passive measurement system components, such as signal path components, passive switches, relays, attenuators, connectors, adapters, cables, sensors, etc. For example, reading information from the memory attached to these passive measurement system components allows tracking the state of the measurement system as a whole and taking into account any fluctuations, such as voltage and resistance in the connections between components. Changes in passive components that could degrade system performance become detectable.

[0059] According to one embodiment, one or more measurement system components that do not have built-in functionality for reporting information items that uniquely identify the corresponding measurement system components include one or more of the following measurement system components: signal path components, coupling components, couplers, adapters, and cables. Therefore, changes to such components that could degrade system performance become detectable.

[0060] According to one embodiment, one or more measurement system components that do not have built-in functionality for reporting, for example, information items that uniquely identify the corresponding measurement system component include one or more of the following measurement system components: thermodynamic components, fixed power supply components, antennas, shielding housing components, cooling components, such as fans, for example, determining the aerodynamic characteristics of the fans. Therefore, changes in such components that would degrade system performance become detectable.

[0061] According to one embodiment, the method includes automatically reading from a corresponding local storage device (e.g., local memory) associated with one or more measurement system components that do not have built-in functionality for reporting, for example, information items that uniquely identify the corresponding measurement system components.

[0062] According to embodiments of the present invention, a method for controlling the operation of a measurement system comprising multiple measurement system components is provided, wherein the method includes determining whether the measurement system comprising multiple measurement system components is in an effective state according to any one of the above embodiments, and supporting the determination according to the indicated method according to any one of the above embodiments.

[0063] According to embodiments of the present invention, a measurement system is created that includes a plurality of measurement system components configured to perform a method according to any of the above embodiments.

[0064] According to embodiments of the present invention, a computer program having program code is created, which, when run on a computer, is used to perform a method according to any of the above embodiments.

[0065] These and other advantages are the subject of the dependent claims.

[0066] The methods and measurement systems described above may optionally be supplemented individually and in combination by any features, functions and details disclosed herein (throughout the document). Attached Figure Description

[0067] The preferred embodiments of this application are described below with reference to the accompanying drawings, in which:

[0068] Figure 1 A flowchart of a method 100 for protecting a measurement system from unauthorized alteration according to an embodiment is shown;

[0069] Figure 2 A flowchart of a method 200 for checking the integrity of a measurement system according to an embodiment is shown;

[0070] Figure 3 A flowchart of a method 300 for determining whether a measurement system including multiple measurement components is in an effective state, according to an embodiment, is shown.

[0071] Figure 4 A flowchart of a method 400 for supporting the determination of whether a measurement system comprising multiple measurement system components is in an effective state, according to an embodiment, is shown.

[0072] Figure 5 A schematic diagram of a measurement system, according to an embodiment, is shown as a calibration device for calibrating production equipment;

[0073] Figure 6 A schematic representation of the process for creating a signature according to an embodiment is shown;

[0074] Figure 7 A schematic representation of a process for verifying the authenticity of a data file according to an embodiment is shown;

[0075] Figure 8 A schematic representation of a process according to an embodiment is shown that enables the automatic reading of information items specific to a measurement system component, wherein the information item identifier specific to the measurement system component does not have a built-in function for reporting information items that identify the corresponding measurement system component;

[0076] Figure 9 A method for protecting a measurement system from unauthorized alteration according to an embodiment of the present invention is shown;

[0077] Figure 10 A method for checking the integrity of a measurement system according to an embodiment of the present invention is shown. Detailed Implementation

[0078] Figure 1 A method 100 for protecting a measurement system having multiple measurement system components and at least one local storage device from unauthorized modification, according to an embodiment of the present invention, is illustrated. Measurement system components may include measuring components such as voltmeters, frequency counters, thermometers, and hygrometers. Measurement system components may include connection components, such as cables. Measurement system components may include one or more of, for example, a power divider, a relay, or a passive component. Measurement system components may also include, for example, one or more smart devices having built-in functionality for reporting one or more information items uniquely identifying the smart devices. Measurement system components may also include one or more so-called "manual devices" that do not have built-in functionality for reporting information items uniquely identifying these devices. Such "manual devices" may, for example, be combined with a local storage device storing such information items.

[0079] The method for protecting the measurement system begins in step 101 by automatically reading out multiple information items, such as uniquely identifying measurement system components and / or representing one or more characteristics of those components. The automatic reading process can be performed within the measurement system itself. Alternatively, an external reading device can be used to automatically read and collect all information items. Information items identifying measurement system components may include, for example, the type identifier and serial number of the corresponding component. Information items representing one or more characteristics of the measurement system component may include, for example, software revision date, software version, calibration date, calibration interval, etc.

[0080] The method further continues in step 102 by automatically combining the read information items, for example, using a combiner or combination unit provided in or outside the measurement system. In step 102, information items from each of the multiple measurement system components are automatically combined into a data set. The data set is represented by summary data, which can be stored as, for example, a summary file or a summary data file. In step 103, a signature is created based on the summary data and will be stored as, for example, a signature file. For example, the openSSL toolkit can be used, for example, to create the signature using a confidential private key. However, other signature generation concepts can also be used. Generally, a signature is cryptographic information that confirms, in a cryptographically reliable manner (meeting desired reliability criteria), that summary data was generated by a specific (trustworthy) person or entity and that the summary data has not been altered. In other words, a signature can be considered information used to verify the authenticity of a digital message or document (e.g., summary data). Under certain preconditions, a valid digital signature gives the recipient a very strong reason to believe that the message (e.g., summary data) was created by a known sender (authentication) and that the message has not been altered during transmission (integrity).

[0081] In step 104, the summary data and signature are stored in at least one local storage device of the measurement system. The signature and summary data can be stored in two separate files, such as a summary file and a signature file, or in a single file. The method then concludes.

[0082] Method 100 allows the provision of information (e.g., summary data and associated signatures), which allows for the verification of the integrity of the measurement system (e.g., using...). Figure 2 (The method). In other words, summary data and the corresponding signature can be used as a basis. Figure 2 The input data for the method, such as reference summary data and the signature associated with the reference summary data.

[0083] However, it should be noted that method 100 may optionally be supplemented, individually or in combination, by any of the features, functions and details disclosed herein.

[0084] Figure 2 A method 200 for checking the integrity of a measurement system comprising multiple measurement system components and at least one local storage device, according to an embodiment of the present invention, is illustrated. For example, this method can be used to check... Figure 1 The integrity of the measurement system mentioned in the discussion. For example, this method can be used to check in Figure 1 The discussion revolves around whether the measurement system remains unchanged. Measurement system components may include, for example, measuring components such as voltmeters, frequency counters, thermometers, and hygrometers. Measurement system components may include connecting components, such as cables. Measurement system components may include, for example, one or more of the following: power dividers, relays, passive components. Measurement system components may also include one or more intelligent devices with built-in functionality for reporting one or more information items that uniquely identify the intelligent devices. Measurement system components may also include one or more so-called "manual devices" that do not have built-in functionality for reporting information items that uniquely identify these devices. Such "manual devices" may, for example, be combined with local storage devices that store such information items.

[0085] The method begins in step 201 by automatically reading out multiple information items, such as uniquely identifying measurement system components and / or representing one or more characteristics of those components. The readout mechanism can be provided within the measurement system itself to perform the automatic readout step. Alternatively, an external readout device can be used to automatically read out and collect all information items. Information items identifying measurement system components may include, for example, the type identifier and serial number of the corresponding component. Information items representing one or more characteristics of the measurement system component may include, for example, software revision date, software version, calibration date, calibration interval, etc.

[0086] The readout information items can be used, for example, to obtain a profile associated with the current measurement system or the current combination of measurement system components. In this example, the readout information items for each of the multiple measurement system components are automatically combined into a data set represented by actual profile data, for example, stored in a profile file.

[0087] In step 202, the method automatically reads reference profile data and a signature from at least one local storage device of the measurement system. The reference profile data is represented, for example, a reference profile file, and the signature is represented, for example, a signature file associated with the reference profile data. However, the reference profile data and the associated signature can also be obtained from a single file comprising two data items.

[0088] Reference summary data and signature can be obtained, for example, through Figure 1 The steps of method 100 shown are used to create and store the data in at least one local storage device.

[0089] The method continues further, with step 203 comparing the current profile data (based on read information items) or at least a plurality of information items of the current profile data with reference profile data or at least a plurality of information items of the reference profile data. The plurality of information items of the current profile data selected for comparison may include, for example, information items required to uniquely identify a measurement system component and those characteristics of the measurement system component that need to remain unchanged (e.g., calibration date, to ensure the absence of unauthorized calibration by a (untrusted) third party). For example, a comparison is performed to obtain component equivalence information as intermediate information. If the read information items are combined into a dataset (e.g., a profile file), a comparison of the profile file with a reference profile file is performed in step 203.

[0090] The method verifies the authenticity of the reference summary data using a signature in step 204, for example, by performing a signature check. For instance, the signature check can be performed using the OpenSSL toolkit, for example, by using the public key corresponding to the private key used to create the signature. This verification step is performed, for example, to obtain signature check information as intermediate information.

[0091] Steps 203 and 204 are performed to obtain measurement system integrity information, for example, based on component equivalence information and signature verification information. The measurement system integrity information indicates whether any measurement system components have been replaced and / or their parameters have been changed since the measurement system's last use or after manufacturing (or assembly) and calibration by the manufacturer. The measurement system integrity information may be further reported to the user of the measurement system or the manufacturer of the measurement system in step 205 (e.g., using a user interface or electronic messaging). The measurement system integrity information can also be used as a trigger for further blocking of the measurement system, making further use of the measurement system with altered integrity impossible.

[0092] However, it should be noted that method 200 may optionally be supplemented, alone or in combination, by any of the features, functions and details disclosed herein.

[0093] Figure 3 A method 300 for determining whether a measurement system comprising multiple measurement components is in an effective state according to an embodiment of the present invention is shown.

[0094] The method according to this embodiment considers not only the integrity of the measurement system but also the (related) environmental conditions, where the measurement system is used to determine whether it can be used effectively, for example, without erroneous measurement results from calibration errors and / or environmental influences (e.g., ambient humidity or temperature). This embodiment avoids the unknown effects of environmental conditions on measurement results. When using the measurement system, it can be checked whether the actual measurement conditions are consistent with the permissible operating environmental conditions. Information regarding permissible operating environmental conditions can be signed, for example, a signature can be created and stored, for example, in at least one local storage device of the measurement system.

[0095] The method begins in step 301 by reading out multiple information items, such as uniquely identifying measurement system components and / or representing one or more characteristics of those components. An automated reading mechanism can be provided within the measurement system itself. Alternatively, an external reading device can be used to automatically read and collect all information items. Information items identifying measurement system components may include, for example, the type identifier and serial number of the corresponding component. Information items representing one or more characteristics of the measurement system component may include, for example, software revision date, software version, calibration date, calibration interval, etc.

[0096] In step 302, the method continues to automatically acquire information about the current operating environmental conditions of the measurement system. This information can be obtained by measuring environmental conditions, for example, using measuring devices that are part of the measurement system, such as temperature sensors, humidity sensors, or electromagnetic radiation sensors. Therefore, information about different current operating environmental conditions can be received, such as temperature information, and / or humidity information, and / or electromagnetic interference information.

[0097] In step 303, the method continues to automatically read reference information items (e.g., uniquely identifying measurement system components and / or representing one or more characteristics of measurement system components) and information about reference operating environmental conditions. Reference operating environmental conditions can be determined, for example, by the manufacturer of the measurement system or by individual components of the measurement system based on the possible effects of environmental conditions. Reference operating environmental conditions can be defined as permissible values, such as temperature, electromagnetic radiation, or humidity, but are most often defined as permissible ranges for these parameters. A permissible range is a range within which the measurement system operates without unexpected errors and considerable fluctuations in measurement results. Therefore, information about reference operating environmental conditions can, for example, include information describing minimum and maximum permissible temperatures (e.g., in the form of minimum and maximum values, or in the form of target and tolerance values).

[0098] The method further continues in step 304 by comparing the read information items (e.g., uniquely identifying a measurement system component and / or representing one or more characteristics of the measurement system component) with reference information items (e.g., uniquely identifying a measurement system component and / or representing one or more characteristics of the measurement system component).

[0099] In step 305, the method checks whether the current operating environment conditions include allowed values ​​or are within allowed ranges defined by information about reference operating environment conditions.

[0100] Steps 304 and 305 are performed to determine whether the measurement system, which includes multiple measurement system components, is in an effective state for use. The determination result can be reported to the user, for example, using a user interface. Alternatively, the determination result can be reported using an electronic message. In response to the determination that the measurement system is in an invalid state for use, the measurement system can be blocked, for example, automatically blocked.

[0101] If it is determined that the measurement system is in an effective state, a certificate regarding the effective state of the measurement system can be issued upon completion of method 300. The certificate may also include the date and time the method was executed, as well as the current state of the measurement system and the current operating environment conditions.

[0102] However, it should be noted that method 300 may optionally be supplemented, alone or in combination, by any of the features, functions and details disclosed herein.

[0103] Figure 4 A method 400 according to an embodiment of the present invention is shown for supporting the determination of whether a measurement system comprising multiple measurement system components is in an effective state.

[0104] The method begins at step 401 by automatically reading out multiple information items, such as uniquely identifying measurement system components and / or representing one or more characteristics of those components. The automatic reading process can be performed within the measurement system itself. Alternatively, an external readout device can be used to automatically read out and collect all information items. Information items identifying measurement system components may include, for example, the type identifier and serial number of the corresponding component. Information items representing one or more characteristics of the measurement system component may include, for example, software revision date, software version, calibration date, calibration interval, etc.

[0105] In step 402, the method continues to obtain information about the permissible operating environmental conditions of the measurement system. This acquisition may include, for example, reading from a user interface or from memory associated with a component of the measurement system, or, for example, collection, or, for example, automatic acquisition. Permissible operating environmental conditions include, for example, permissible temperature ranges and / or permissible humidity ranges and / or permissible maximum electromagnetic interference. For example, permissible operating environmental conditions may correspond to (e.g., equal to, or within a range around) the environmental conditions already used in the calibration of the measurement system (e.g., by the manufacturer, or by a trusted entity), or deviate from the environmental conditions used in the calibration of the measurement system by no more than permissible tolerances.

[0106] Information regarding permissible operating environment conditions can be signed; for example, a signature can be created and stored on at least one local storage device, such as that of a measurement system. For example, as referenced... Figure 6 The process of creating a signature described above can be used for signing.

[0107] The method terminates in step 403 by storing information items that identify measurement system components and / or represent one or more characteristics of the measurement system components, as well as information about permissible operating environment conditions, to determine whether the measurement system, which includes multiple measurement system components, is in an effective state for use.

[0108] In execution Figure 3 When using the method shown, the stored information can be further used as reference information.

[0109] However, it should be noted that method 400 may optionally be supplemented, alone or in combination, by any of the features, functions and details disclosed herein.

[0110] Figure 5 An embodiment is shown, wherein the measurement system (e.g., the one described above) Figures 1 to 4The measurement system mentioned in the discussion of the method is used as a calibration device for calibrating production equipment. For example... Figure 5 As shown, calibration device 500 is calibrated and delivered to the user, for example, at the manufacturer's side (or typically at the trusted entity's side). The user is also the user of automated test device 501, which was previously purchased (or rented) from the manufacturer, for example.

[0111] Define calibration device 500 and permissible operating environment conditions (e.g., using according to...) Figure 1 Or according to Figure 4 The reference information items (determined by the method) are stored in the local storage device 502 (e.g., memory) of the calibration device 500 (e.g., by the manufacturer or by another trusted entity). Additionally, the reference information items and permissible operating environment conditions may optionally be stored on the manufacturer's remote server 503, for example, in the cloud, as a backup in case the local storage device 502 is damaged or malfunctions.

[0112] When a user uses calibration device 500 to calibrate automated test device 501, the validity status of calibration device 500 is checked at calibration device 500. This check can, for example, be performed using... Figure 2 Method 200 or use according to Figure 3 This method can be used to perform the check. However, alternatively, the check can be performed, for example, using... Figure 2 and Figure 3 A combination of methods, where according to Figure 2 The method can be based on Figure 3 This is supplemented by checking the environmental operating conditions of the method. If confirmed (for example, in...) Figure 2 In the method's inspection steps 203 and 204, and in Figure 3 If the calibration device 500 is used in a valid state during the inspection steps 304 and 305 of the method, then the certificate confirmation (or electronic message, or message on the user interface) regarding the use of the calibration device 500 in a valid state can be issued by the calibration device 500 itself or by the manufacturer based on the result of determining whether the calibration device 500 is used in a valid state, and the result is provided by the calibration device 500 to the manufacturer.

[0113] For example, the method may include checking

[0114] a) Whether the automated test equipment is calibrated using the measurement system at predetermined required intervals (e.g., once every specified time period, or once every specified number of tests, or according to any other required rules); and

[0115] b) When calibrating automated test equipment, is the measurement system in "good condition" (i.e., unmodified compared to the reference state and / or operating under permissible environmental operating conditions).

[0116] This examination leads to the conclusion that the automated test equipment is reliable when testing one or more devices under test. Therefore, a certificate of conformity (which may be provided, for example, electronically, in printed form, or in any other suitable form) can, for example, indicate the reliability of the automated test equipment at a given moment or when testing a batch of devices under test.

[0117] However, it should be noted that Figure 5 The system may optionally be supplemented by any one or a combination of the features, functions and details disclosed herein.

[0118] Figure 6 The process of creating a signature is shown, and the creation of a signature is used for, for example... Figure 1 In the methods shown (and / or optionally) Figure 4 The steps in the method are as follows. A data file (e.g., a digest file containing summary data) and a private key (e.g., a confidential private key) are used, for example, by the openSSL toolkit (or any other signing method) to create a signature based on the summary data. The data file is then signed with the created signature to protect its contents (e.g., in the sense that the signature can be used to verify the authenticity and / or integrity of the data file). The signature is stored in a signature file. The signature and signature data may also be stored in a single file (not shown).

[0119] The signing (or signing) process is used to prevent, for example, data in a data file (e.g., summary data) and / or information describing permitted environmental operating conditions from being altered without being detected. After storing the signature (or signature file) and the signed data file, the signature (or signature file), such as the signature stored in the signature file, can be used to verify the authenticity and / or integrity of the stored data file, for example, to check whether the data file and / or signature file have been altered. Figure 7 As shown.

[0120] Finally, according to Figure 6 The signing process may optionally be used in any method and apparatus disclosed herein, for example, to allow verification of the authenticity and / or completeness of the profile and / or information about the permissible operating conditions of the environment.

[0121] However, it should be noted that Figure 6 The method may optionally be supplemented by any one or in combination of the features, functions and details disclosed herein.

[0122] Figure 7 The process for verifying the authenticity of a data file is illustrated. This data file, for example, contains reference summary data and / or information about permissible environmental operating conditions. Figure 2The method shown is used to check the integrity of the measurement system. Figure 7 The process can be optionally used for Figure 3 The method involves checking the authenticity and completeness of information regarding permissible environmental operating conditions.

[0123] like Figure 7 As shown, verifying the match between the data file and the signature file checks whether the signed data and / or the signature of that data has been altered since it was signed. To check this match, use the openSSL toolkit (or any other signature checking method) to perform a signature check using the stored data file, signature file, and public key (associated with the person or entity that generated the signature using their private key). Figure 6 As shown, the public key corresponds to the private key used when signing (or signing).

[0124] If the signature check is successful, a pass result is provided (or received), and a report is provided to the measurement system or other entity that requested the signature check that the data has not been altered (and / or is trustworthy, i.e., generated by a trusted entity). If the signature check fails, a failure result is received, and a report is provided to the measurement system or other entity that requested the signature check that the data has been altered. Based on the report on the signature check results, measurement system integrity information may be provided (or received), such as... Figure 2 The method shown.

[0125] However, it should be noted that Figure 7 The method may optionally be supplemented by any one or in combination of the features, functions and details disclosed herein.

[0126] Figure 8 The process is illustrated to enable the automatic reading of measurement system component-specific information items, where the measurement system component-specific information item identifies a measurement system component that does not have built-in functionality for reporting information items identifying the corresponding measurement system component. Measurement system components that do not have built-in functionality for reporting information items identifying the corresponding measurement system component are so-called "manual" devices, such as older measurement equipment, passive components such as cables, relays, power dividers, antennas, shielding devices, or shielding boxes, etc. Figure 8As shown, the "manual" measurement system component 801 is combined with the local storage device 802, for example, in an inseparable manner. An inseparable combination can be such that component 801 cannot be separated from the local storage device 802 in a tool-less, non-destructive manner without breaking seals, etc. Component 801 can also be glued, welded, riveted, rolled, or molded to the local storage device 802. Component 801 can also be arranged together with the local storage device 802 in a separate housing (e.g., a box) or under a separate cover. The local storage device 802 can be any storage device, such as a USB storage device, a network-attached storage device, an RFID tag, a wired LAN storage device, a wireless LAN storage device, etc. This list of storage devices is non-exclusive, and any local storage device can be used.

[0127] like Figure 8 As further shown, one or more, or even all, information items uniquely identifying the "manual" component 801 (such as a serial number or type identifier), and / or information items representing one or more characteristics of the "manual" component (such as a software revision, calibration date, or calibration interval), as well as any other data characterizing the "manual" device (such as a calibration interval), are written (e.g., manually) into a profile. The contents of the profile are then signed, for example, using a private key, to protect the data stored in the profile from alteration (e.g., using the signing method described herein). The signing (or signature) process is, for example, similar to... Figure 6 The same applies as shown. The created signature file and signature profile (or a combined file including the profile and signature) are stored in local storage device 802 combined with "manual" device 801.

[0128] Therefore, measurement system component-specific information items that identify "manual" measurement system components can be executed. Figure 1-4 The method shown and other methods described herein are read automatically.

[0129] In short, Figure 8 The method can be used to obtain information about “passive” components, and it can be used in other methods disclosed herein (e.g., to check whether any passive components have been replaced). In other words, by providing a corresponding storage device to one or more passive components (e.g., in an inseparable manner), passive components can be monitored in the same way as any active component (which is originally equipped to allow the reading of unique identification information).

[0130] However, it should be noted that Figure 8 The method may optionally be supplemented by any one or in combination of the features, functions and details disclosed herein.

[0131] Figure 9A schematic diagram of a measurement system comprising multiple measurement system components and a method for protecting the measurement system from unauthorized alteration, according to an embodiment of the present invention, is shown.

[0132] Measurement system 901 includes multiple components A to X configured to measure various parameters of production equipment (e.g., when performing calibration of automated test equipment), such parameters as voltage, resistance, and frequency. Some components are also configured to measure environmental conditions such as temperature or humidity, for example... Figure 9 The device X shown may, for example, have one or more components for measuring the temperature of the automated test equipment or the temperature in the environment of the automated test equipment, and may also have one or more components for measuring the temperature (or any other environmental parameter) of the measurement system itself (or one or more components of the measurement system itself). The measurement system 901 also includes a local storage device 902 for storing data about the measurement system components. The interconnected measurement system components form a service box provided by the manufacturer to the user for measurement purposes, such as calibration (e.g., calibration of the automated test equipment).

[0133] Measurement system components are linked together by automatically storing their unique data in a profile file. All unique data, such as the serial number of each measurement system component, device type, software revision, calibration date, and calibration interval, are collected in dataset 903. Some data about components (e.g., calibration interval) or about the linked entity (service box) (e.g., service box serial number, service box calibration date, or service box software revision) are added manually to the dataset, for example.

[0134] The dataset is then compiled into a profile file 904 and stored in the local storage device 902 of the measurement system 901. To prevent the data stored in the profile file 904 from being altered, its contents are modified through a signature creation process (e.g., ...). Figure 6 The process (as shown) is used for signing. The signature file 905 is also stored in the local storage device 902 of the measurement system 901. Alternatively, the data summary and signature are stored in a single file.

[0135] Therefore, the measurement system 901 is protected from unauthorized alterations, and its integrity can be checked by the user during operation.

[0136] However, it should be noted that Figure 9 The method may optionally be supplemented by any one or in combination of the features, functions and details disclosed herein.

[0137] Figure 10 A diagram showing the method for checking Figure 9The process for ensuring the integrity of the measurement system 901 (e.g., referred to as a service box) is as follows: Data regarding multiple parameters of the measurement system components (e.g., serial number, component type, software revision, calibration date, calibration interval) is read out (e.g., from memory individually associated with each measurement system component) and collected into data set 1003. Data is automatically read out for components with built-in functionality for reporting information items identifying the component. For those components that do not have (original) built-in functionality for reporting information items identifying the component (e.g., passive components), for example, [further details can be omitted]. Figure 8 The process shown enables the automatic reading of information items specific to measurement system components.

[0138] Data set 1003 is represented by profile 1004, which is the result of the current combination of automatically combined readout data and representation measurement system 901.

[0139] The profile 904 and signature file 905 stored in the local storage device 902 of the measurement system 901 are read from the local storage device. The current combined profile 1004 of the measurement system 901 is compared with the reference profile 904 to perform an equality check 910. If the equality check fails, i.e., the current profile 1004 is not equal to the reference profile 904, a report 950 is issued: the measurement system state or measurement settings have been changed, and the measurement system is not in a valid state for user operation.

[0140] Furthermore, for the equality check 910, a signature check 920 is performed to check whether the profile file 904 matches the signature file 905. This check indicates whether the stored profile file and signature file have been altered after the manufacturer of the measurement system 910 stored them in the local storage device 902. If the signature check 920 is unsuccessful, i.e., the profile file 904 does not match the signature file 905, a report 960 is issued: the measurement system status or measurement settings have been altered, and the measurement system is not in a valid state for user operation.

[0141] If the results of the equality check 910 and the signature check 920 are both positive, then report 940 is issued: The measurement system status or measurement settings have not changed, and the measurement system is in a valid state for operation by the user.

[0142] However, it should be noted that Figure 10 The method may optionally be supplemented by any one or in combination of the features, functions and details disclosed herein.

[0143] Other embodiments and aspects

[0144] In the following, other aspects and embodiments of the invention will be described, which may be used alone or in combination with any other embodiments disclosed.

[0145] Furthermore, the embodiments disclosed in this section may optionally be supplemented, individually and in combination, by any other features, functions, and details disclosed herein.

[0146] Measuring frame integrity

[0147] Purpose of the invention

[0148] In the following, some of the objectives of the invention that can be achieved in some or all of the embodiments will be described.

[0149] Embodiments of the present invention allow for ensuring the integrity of the measuring device: for example, it can be ensured that the measuring device (e.g., the measuring system disclosed herein) correctly measures what should be measured.

[0150] According to embodiments of the invention, it is configured to check (or ensure) one or more of the following conditions (e.g., when operating a measurement system):

[0151] - Correct environmental conditions (e.g., temperature, humidity)

[0152] - Electromagnetic protection (e.g., the presence and / or status of electromagnetic protection).

[0153] - Track and check the warm-up time

[0154] - Track and inspect wear and tear (e.g., on relays).

[0155] - Equipment traceability

[0156] According to one aspect of the invention, the measuring device used (e.g., a component of a measuring system) is identifiable (e.g., a serial number, a unique identifier).

[0157] According to one aspect of the invention, there exists a function that (e.g., automatically) checks the calibration date of the measuring equipment used, for example, to ensure that the calibration status of the measuring equipment has not been changed, for example, since the authorized entity recorded the status. For example, it can be checked that no recalibration was performed by an unauthorized or untrusted entity.

[0158] Target users and business model

[0159] According to one aspect, the target users of the concepts disclosed herein are engineers and technicians who need to operate reliable measuring equipment.

[0160] According to one aspect, embodiments of the invention allow for business models based on (or offer the advantages of) the following:

[0161] - A more efficient, less time-consuming, and cost-effective solution; no need for manual integrity checks.

[0162] - Reduce the risk of quality problems that could have a significant cost impact on quality-sensitive industries.

[0163] Common solutions and problems – improvements achieved through examples

[0164] Traditionally, there has been manual checking of the boundary conditions required for reliable measurements, which is prone to error.

[0165] - Manual inspection of coherence measurement system

[0166] - Manually check the calibration status of the measuring equipment used, and manually pair the calibration data and measuring equipment.

[0167] - Manual check of environmental conditions

[0168] Traditionally, the problem is caused by unknown effects of electromagnetic influences.

[0169] In addition, traditionally, the problem has been caused by incomplete traceability documentation of the measuring equipment used.

[0170] Traditionally, wear and tear is not usually checked.

[0171] According to one aspect of the invention, embodiments of the invention are configured to overcome one or more of these disadvantages.

[0172] For example, embodiments of the present invention (optionally) are adapted to perform automatic checks on coherence measurement systems.

[0173] As another example, embodiments of the invention (optionally) are adapted to perform automatic checks on the calibration status of the measuring equipment used, calibration data, and manual pairing of the measuring equipment.

[0174] As another example, embodiments of the present invention are adapted to automatically check environmental conditions.

[0175] As another example, embodiments of the invention are suitable for identifying problems caused by unknown effects of electromagnetic influences.

[0176] As another example, embodiments of the invention are adapted to allow for good or even complete traceability documentation of the measuring equipment used.

[0177] As another example, embodiments of the present invention are adapted to automatically perform checks on wear conditions.

[0178] Description of some (optional) aspects and ideas of the present invention

[0179] In the following, aspects, ideas, features, functions and details will be described, which may optionally be incorporated individually and in combination into any of the embodiments disclosed herein.

[0180] However, the aspects described below can also be configured to form self-consistent embodiments.

[0181] According to some embodiments of the present invention, an assembly of measuring devices is created, which includes a data storage device integrated into a higher-level unit, wherein appropriate operating conditions of the measuring system are automatically ensured.

[0182] Embodiments of the invention include (or incorporate) automated checks to ensure the integrity of the measurement system. According to various aspects of the invention, one or more of the following features, functions, or checks may be implemented in embodiments of the invention:

[0183] - Automatically track appropriate environmental conditions (e.g., humidity, temperature, electromagnetic radiation) using sensors or other measurement systems (optional)

[0184] - Environmental conditions are suitable for the instrument (e.g., measurement system components) (optional)

[0185] - The instrument (e.g., measurement system components) and calibration data are matched together (optional).

[0186] - The instrument (e.g., measurement system components) is in good condition (e.g., calibrated) (optional)

[0187] - Inspect the wear condition of components of the measurement system (e.g., relays) (optional)

[0188] - Measurement devices that cannot be automatically tracked (e.g., measurement system components) (e.g., those without built-in functionality for reporting information items; e.g., passive measurement system components) are inextricably linked to a higher-level unit (e.g., an active measurement system component, which may, for example, be able to report information items that uniquely identify it) and are automatically tracked by it (optionally).

[0189] Embodiments of the invention may optionally include the automatic generation of certificates for the performed measurements (e.g., measurements performed by a measurement system; e.g., calibration of automated test equipment). According to various aspects of the invention, one or more of the following advantages, features, functions, or checks can be achieved:

[0190] - Traceability of the measuring instruments used; the serial number or unique identifier of the measuring system used is known.

[0191] - Data verification before certificate generation

[0192] Optionally, embodiments of the invention provide protection against external damage. According to various aspects of the invention, one or more of the following features, functions, or checks can be implemented in various embodiments of the invention:

[0193] - Data is encrypted

[0194] - Check if the system has been replaced.

[0195] - Mechanical seal measurement system and data storage device to prevent unauthorized access.

[0196] Measurement setup integrity

[0197] According to one aspect, embodiments of the invention are adapted to ensure the integrity of measurement settings (e.g., measurement systems).

[0198] The following section describes how to ensure the integrity of the measurement setup.

[0199] How can I prevent data from being altered?

[0200] The following section describes how to prevent data from being altered.

[0201] To prevent data in a file from being altered without detection, its content can be signed. The resulting signature can be stored in a signature file. Now, the signature file and / or the data file cannot be altered without being detected.

[0202] As an example of signing (or signing), it should be noted that OpenSSL provides the option to sign any data with a signature. Therefore, a (confidential!) private key is used. An example of this process is... Figure 6 As shown in the image.

[0203] This concept for preventing data from being altered can be optionally used in any of the embodiments disclosed herein, for example for protecting a profile (which may replace a data file), and / or for protecting information about permissible environmental operating conditions (in which case, the information may replace a data file), or for example for protecting combined information (e.g., including information from the profile and information about permissible environmental operating conditions).

[0204] How can I check if the data has been changed?

[0205] The following section describes how to check if data has been altered (and / or if the data is trustworthy, for example, if the data originates from a trusted entity).

[0206] To check whether the signed data and / or the signature of that data have changed since it was signed, it may be necessary to verify the match between the corresponding data file and the signature file.

[0207] The following section will describe an example of a signature (or signature verification):

[0208] OpenSSL provides an option to check if signed (or signed) data matches a corresponding signature. Therefore, a public key is required. This public key corresponds to the private key used when signing (or signing).

[0209] Examples of the process are in Figure 7 As shown in the image.

[0210] This concept for checking whether data has been altered (and / or trusted) can be optionally used in any of the embodiments disclosed herein, for example, to check whether a profile (which may replace a data file) has been altered, and / or to check whether information about permissible environmental operating conditions (which may in this case replace a data file) has been altered, or for example, to check whether combined information (e.g., information including the profile and information about permissible environmental operating conditions) has been altered.

[0211] How to make a "manual" device uniquely identifiable?

[0212] The following will describe how to make "manual" devices (e.g., devices or measurement system components that are not initially able to allow electronic readouts of information that uniquely identify the device or measurement system component) uniquely identify themselves.

[0213] "Manual" devices (e.g., old measuring devices, cables, relays, etc.) can be inseparably combined, for example, with local storage devices having communication interfaces.

[0214] Some or even all of the device’s unique (e.g., SN or serial number, and / or calibration date) and other (e.g., calibration interval) data are manually written into the profile file.

[0215] Optionally, to prevent the data from being altered, its content is signed. Now, the signature file and / or digest file cannot be altered without being detected.

[0216] Figure 8 An example of the process is shown in the figure.

[0217] Each device can be uniquely identified.

[0218] The process according to one aspect of the invention will be described below.

[0219] For example, it can be assumed that all devices (e.g., all measurement system components) can uniquely identify themselves (e.g., using built-in functions to allow reading out information that uniquely identifies the device, or using concepts such as those described in the section "How to Make 'Manual' Devices Uniquely Identify Themselves," for example, referring to...) Figure 8 ).

[0220] According to one aspect of the invention, devices (e.g., measurement system components) can be combined (e.g., logically) by automatically storing their unique data in a profile (e.g., a data file).

[0221] Other data about the device (or multiple devices) (e.g., calibration intervals) or other data about the combined entity (here, the service box (or measurement system)) (e.g., SN or serial number) can be added to the profile, for example, manually (or automatically).

[0222] Optionally, to prevent data from being altered, its content is signed. Now, the signature file and digest file cannot be altered without being detected.

[0223] An example of this process is in Figure 9 As shown in the image.

[0224] Furthermore, it should be noted that this process can be used as described in this section and can be optionally supplemented, individually and in combination, by any features, functions, and details disclosed herein (throughout the document).

[0225] Check the integrity of the measurement settings

[0226] The process according to one aspect of the invention will be described below.

[0227] To verify that the measurement setup (e.g., the measurement system) has not been altered, a profile of the current assembly of the equipment can be collected (e.g., information describing the actual assembly of the measurement system components at the time of inspection). This requires an automatically generated portion of the profile (or reference profile) (e.g., those information items in the profile or reference profile that were not manually added but can be automatically read from the memory of the measurement system components or the memory attached to the measurement system components) (which may, for example, be generated at an earlier time, such as when the measurement system was assembled, inspected, or calibrated by a trusted person).

[0228] Additionally, the profile and signature file must match. Otherwise, the measurement settings have changed since the last signature.

[0229] For example, if a discrepancy is found (e.g., between the automatically generated sections of the current configuration profile and the reference profile, or between the reference profile and the signature file), a message indicating that the measurement system is in an invalid state can be provided.

[0230] An example of this process is in Figure 10 As shown in the image.

[0231] Furthermore, it should be noted that this process can be used as described in this section and can be optionally supplemented, individually and in combination, by any features, functions, and details disclosed herein (throughout the document).

[0232] in conclusion

[0233] While no known method takes into account the environmental conditions that allow for the proper operation of a measurement system, embodiments of the invention provide significant improvements. Although the results of known methods are highly dependent on whether the measuring device is used under the same conditions provided during its manufacture and calibration, embodiments of the invention allow for the automatic detection of unreliable operating conditions. Therefore, incorrect operation of the measuring device and errors in the measurement results can be avoided.

[0234] Alternative implementation methods

[0235] Although some aspects are described in the context of the device, it is clear that these aspects also represent a description of the corresponding method, where a block or device corresponds to a method step or a feature of a method step. Similarly, aspects described in the context of a method step also represent a description of an item or feature of the corresponding block or device. Some or all of the method steps may be performed by (or using) hardware devices, such as microprocessors, programmable computers, or electronic circuits. In some embodiments, one or more of the most important method steps may be performed by such devices.

[0236] Depending on certain implementation requirements, embodiments of the present invention can be implemented in hardware or software. This implementation can be executed using a digital storage medium (e.g., floppy disk, DVD, Blu-ray, CD, ROM, PROM, EPROM, EEPROM, or flash memory) on which electronically readable control signals are stored, which cooperate with (or are capable of cooperating with) a programmable computer system to perform the corresponding methods. Therefore, the digital storage medium can be computer-readable.

[0237] Some embodiments of the invention include a data carrier having electrically readable control signals that are capable of cooperating with a programmable computer system to perform one of the methods described herein.

[0238] Typically, embodiments of the present invention can be implemented as a computer program product having program code that, when permitted on a computer, is operable to perform one of the methods. The program code may, for example, be stored on a machine-readable medium.

[0239] Other embodiments include a computer program stored on a machine-readable medium for performing one of the methods described herein.

[0240] In other words, embodiments of the method of the present invention are therefore computer programs having program code that, when run on a computer, performs one of the methods described herein.

[0241] Therefore, another embodiment of the method of the present invention is a data carrier (or digital storage medium, or computer-readable medium) including a computer program recorded thereon for performing one of the methods described herein. The data carrier, digital storage medium, or recording medium is generally tangible and / or non-transitory.

[0242] Therefore, another embodiment of the method of the present invention represents a data stream or signal sequence for performing one of the methods described herein. The data stream or signal sequence may, for example, be configured to be transmitted via a data communication connection (e.g., via the Internet).

[0243] Another embodiment includes a processing device, such as a computer or programmable logic device, configured or adapted to perform one of the methods described herein.

[0244] Another embodiment includes a computer on which a computer program for performing one of the methods described herein is installed.

[0245] Another embodiment of the invention includes an apparatus or system configured to transmit (e.g., electronically or optically) a computer program for performing one of the methods described herein to a receiver. The receiver may be, for example, a computer, a mobile device, a storage device, etc. The apparatus or system may, for example, include a file server for transmitting the computer program to the receiver.

[0246] In some embodiments, a programmable logic device (e.g., a field-programmable gate array) may be used to perform some or all of the functions of the methods described herein. In some embodiments, the field-programmable gate array may cooperate with a microprocessor to perform one of the methods described herein. Generally, the methods are preferably performed by any hardware device.

[0247] The apparatus described herein can be implemented using hardware devices, a computer, or a combination of hardware devices and a computer.

[0248] The apparatus described herein, or any component thereof, may be implemented, at least in part, in hardware and / or software.

[0249] The methods described herein can be performed using hardware devices, computers, or a combination of hardware devices and computers.

[0250] The methods or any components of the apparatus described herein may be performed, at least in part, by hardware and / or software.

[0251] The embodiments described herein are merely illustrative of the principles of the invention. It should be understood that modifications and variations of the arrangements and details described herein will be readily apparent to those skilled in the art. Therefore, the intent is limited only by the scope of the appended claims and not by the specific details presented through the description and illustration of the embodiments herein.

Claims

1. A method (300) for determining whether a measurement system comprising multiple measurement system components is in an effective state for use, the method comprising: Automatically read out (301) multiple information items that identify the measurement system component and / or represent one or more characteristics of the measurement system component; Automatically obtain (302) information about the current operating environment conditions of the measurement system; Automatically read (303) reference information items that identify the measurement system components and / or represent one or more characteristics of the measurement system components, as well as information about reference operating environment conditions; as well as The read information item identifying the measurement system component and / or representing one or more characteristics of the measurement system component is compared with the reference information item identifying the measurement system component and / or representing one or more characteristics of the measurement system component (304), and Check (305) whether the current operating environment conditions include allowed values ​​or are within the allowed range defined by the information regarding the reference operating environment conditions. In order to determine whether the measurement system, which includes the plurality of measurement system components, is in use in the effective state.

2. The method according to claim 1, further comprising: The report describes the results of determining whether the measurement system, which includes the plurality of measurement system components, is used in the effective state.

3. The method according to any one of the preceding claims further includes: If it is determined that the measurement system is being used in an invalid state, the measurement system is automatically blocked.

4. The method according to claim 1, wherein, The measurement system is a calibration device configured to calibrate production equipment.

5. The method of claim 1, further comprising obtaining a certificate confirming the use of the measurement system in the effective state.

6. The method according to claim 5, wherein, The certificate is obtained by the measurement system and / or by a remote server.

7. The method of claim 6, further comprising automatically sending the result of determining whether the measurement system, including the plurality of measurement system components, is used in the effective state to the remote server.

8. The method according to claim 1, in, One or more measurement system components that do not have built-in functionality for reporting information items identifying the corresponding measurement system component are combined with an associated local storage device to enable the automatic reading of measurement system component-specific information items that identify the measurement system component that does not have built-in functionality for reporting information items identifying the corresponding measurement system component.

9. The method of claim 8, wherein the method comprises: Before automatically reading out the information items that identify the corresponding measurement system components, the measurement system components that do not have built-in functions for reporting information items that identify the corresponding measurement system components are combined with the associated local storage device.

10. The method according to any one of claims 8 and 9, wherein, The measurement system component, which does not have a built-in function for reporting information items that identify the corresponding measurement system component, is inseparably combined with the associated local storage device.

11. The method according to claim 8, wherein, A measurement system component that does not have built-in functionality for reporting information items identifying the corresponding measurement system component is combined with its associated local storage device in such a way that the measurement system component cannot be separated from its associated local storage device without tools, or Wherein, the measurement system component that does not have a built-in function for reporting information items identifying the corresponding measurement system component is combined with the corresponding associated local storage device in such a way that the measurement system component cannot be separated from the corresponding associated local storage device in a non-destructive manner, or The measurement system component, which does not have a built-in function for reporting information items identifying the corresponding measurement system component, is combined with the corresponding associated local storage device in such a way that the measurement system component cannot be separated from the corresponding associated local storage device without breaking the seal.

12. The method according to claim 8, wherein, At least one of the measurement system components that does not have a built-in function for reporting information items identifying the corresponding measurement system component is glued to the corresponding one in the local storage device.

13. The method according to claim 8, wherein, At least one of the measurement system components, which does not have a built-in function for reporting information items identifying the corresponding measurement system component, is arranged in a separate housing having one of the local storage devices.

14. The method according to claim 8, wherein, One or more of the corresponding local storage devices are one of the following: USB storage devices, network-attached storage devices, wired LAN devices, and RFID tags.

15. The method according to claim 8, in, The one or more measurement system components that do not have built-in functionality for reporting information items that identify the corresponding measurement system components include one or more measurement devices.

16. The method according to claim 8, in, The one or more measurement system components that do not have built-in functionality for reporting information items identifying the corresponding measurement system components include one or more passive measurement system components.

17. The method according to claim 8, in, The one or more measurement system components that do not have built-in functionality for reporting information items identifying the corresponding measurement system components include one or more of the following measurement system components: Signal path components, Coupled components, Coupler, adapter, cable.

18. The method according to claim 8, in, The one or more measurement system components that do not have built-in functionality for reporting information items identifying the corresponding measurement system components include one or more of the following measurement system components: Thermodynamic components, Fixed power supply components, antenna, Shielding housing components, Cooling components.

19. The method according to claim 8, in, The method includes automatically reading information items identifying the one or more measurement system components that do not have built-in functionality for reporting information items identifying the corresponding measurement system components from a corresponding local storage device associated with the one or more measurement system components.

20. The method according to claim 8, wherein, One or more characteristics of the measurement system components include the wear condition of at least one of the measurement system components.

21. The method according to claim 20, wherein, The information item identifying the wear condition is the value of a counter arranged in a corresponding measurement system component, wherein the counter is incremented by one each time the corresponding measurement system component is used.

22. The method of claim 20, further comprising performing a self-estimation of a corresponding measurement system component to determine the wear condition of the corresponding measurement system component.

23. The method according to claim 1, wherein, Information regarding the current operating environment conditions and information regarding the reference operating environment conditions include humidity and / or temperature and / or electromagnetic interference.

24. A method (400) for supporting the determination of whether a measurement system comprising multiple measurement system components is in an effective state for use, the method comprising: Automatically read out (401) multiple information items that identify the measurement system component and / or represent one or more characteristics of the measurement system component; Obtain (402) information about the permissible operating environment conditions of the measurement system; as well as The storage (403) includes information items that identify the measurement system components and / or represent one or more characteristics of the measurement system components, as well as information about the permissible operating environment conditions, for determining whether the measurement system, including the plurality of measurement system components, is used in the effective state.

25. The method of claim 24, further comprising: The information items from each of the multiple measurement system components read out are automatically combined into a data set represented by summary data.

26. The method of claim 25, further comprising creating a signature based on the summary data and storing the signature.

27. The method according to claim 26, wherein, Creating the signature involves signing the summary data with a private key.

28. The method according to claim 27, wherein, The private key is a confidential private key.

29. The method according to claim 26, wherein, The summary data and the signature are stored in two separate files, or The summary data and the signature are stored in a file.

30. The method according to claim 24, wherein, The measurement system further includes at least one local storage device, and the information items identifying the measurement system components and / or representing one or more characteristics of the measurement system components, as well as the information regarding the permissible operating environment conditions, are stored in the at least one local storage device.

31. The method according to claim 24, wherein, The information items identifying the measurement system components and / or representing one or more characteristics of the measurement system components are stored in a first local storage device of the measurement system, and the information regarding the permissible operating environment conditions is stored in a second local storage device of the measurement system.

32. The method according to claim 24, wherein, One or more characteristics of the measurement system components include the wear condition of at least one of the measurement system components.

33. The method according to claim 32, wherein, The information item identifying the wear condition is the value of a counter arranged in a corresponding measurement system component, wherein the counter is incremented by one each time the corresponding measurement system component is used.

34. The method of claim 32 further includes performing a self-estimation of a corresponding measurement system component to determine the wear condition of the corresponding measurement system component.

35. The method of claim 24, wherein information about current operating environment conditions and information about reference operating environment conditions includes humidity and / or temperature and / or electromagnetic interference.

36. The method according to claim 24, in, One or more measurement system components that do not have built-in functionality for reporting information items identifying the corresponding measurement system component are combined with an associated local storage device to enable the automatic reading of measurement system component-specific information items that identify the measurement system component that does not have built-in functionality for reporting information items identifying the corresponding measurement system component.

37. The method of claim 36, wherein the method comprises, before automatically reading out information items identifying the respective measurement system components, combining the measurement system components that do not have built-in functionality for reporting information items identifying the respective measurement system components with an associated local storage device.

38. The method according to any one of claims 36 and 37, wherein, The measurement system component, which does not have built-in functionality for reporting information items that identify the corresponding measurement system component, is inseparably combined with the associated local storage device.

39. The method according to claim 36, wherein, A measurement system component that does not have built-in functionality for reporting information items identifying the corresponding measurement system component is combined with its associated local storage device in such a way that the measurement system component cannot be separated from its associated local storage device without tools, or Wherein, the measurement system component that does not have a built-in function for reporting information items identifying the corresponding measurement system component is combined with the corresponding associated local storage device in such a way that the measurement system component cannot be separated from the corresponding associated local storage device in a non-destructive manner, or The measurement system component, which does not have a built-in function for reporting information items identifying the corresponding measurement system component, is combined with the corresponding associated local storage device in such a way that the measurement system component cannot be separated from the corresponding associated local storage device without breaking the seal.

40. The method of claim 36, wherein, At least one of the measurement system components that does not have a built-in function for reporting information items identifying the corresponding measurement system component is glued to the corresponding one in the local storage device.

41. The method according to claim 36, wherein, At least one of the measurement system components, which does not have a built-in function for reporting information items identifying the corresponding measurement system component, is arranged in a separate housing having one of the local storage devices.

42. The method according to claim 36, wherein, One or more of the corresponding local storage devices are one of the following: USB storage devices, network-attached storage devices, wired LAN devices, and RFID tags.

43. The method according to claim 36, in, The one or more measurement system components that do not have built-in functionality for reporting information items that identify the corresponding measurement system components include one or more measurement devices.

44. The method according to claim 36, in, The one or more measurement system components that do not have built-in functionality for reporting information items identifying the corresponding measurement system components include one or more passive measurement system components.

45. The method according to claim 36, in, The one or more measurement system components that do not have built-in functionality for reporting information items identifying the corresponding measurement system components include one or more of the following measurement system components: Signal path components, Coupled components, Coupler, adapter, cable.

46. ​​The method according to claim 36, in, The one or more measurement system components that do not have built-in functionality for reporting information items identifying the corresponding measurement system components include one or more of the following measurement system components: Thermodynamic components, Fixed power supply components, antenna, Shielding housing components, Cooling components.

47. The method according to claim 36, in, The method includes automatically reading information items identifying the one or more measurement system components that do not have built-in functionality for reporting information items identifying the corresponding measurement system components from a corresponding local storage device associated with the one or more measurement system components.

48. A method for controlling the operation of a measurement system comprising a plurality of measurement system components, wherein the method comprises determining, according to any one of claims 1 to 23, whether the measurement system comprising the plurality of measurement system components is in an effective state, and supporting the indicated determination according to any one of claims 24 to 47.

49. A measurement system comprising a plurality of measurement system components configured to perform the method according to any one of the preceding claims.

50. A computer program having program code for performing the method according to any one of claims 1 to 48 when run on a computer.

Images