Method and system for creating tamper-proof operation datasets

Abstract

The present invention relates to a method for creating a tamper-proof operation dataset during the operation of a display device (10a-c, 200d), the method comprising the steps of: transmitting input data to a computing unit (14a-c, 202d) for the purpose of generating displayable output data; transmitting output data to an inspection unit (20a-c, 203d); transmitting input data to an inspection unit (20a-c, 203d); and generating comparison data from a comparison of the input data with the output data by the inspection unit (20a-c, 203d). It is proposed that the method further comprises the steps of: compiling data by a cryptographic component (32a-c, 212d) to form an operation dataset comprising at least two of the following three types of data: input data, output data, and / or comparison data; and performing tamper-proof processing on the operation dataset by the cryptographic component (32a-c, 212d) to provide a tamper-proof operation dataset.

Claims

1. A method for creating a tamper-proof operation dataset during the operation of a display device (10a to c, 200d), The steps include transferring input data to computing units (14a-c, 202d) in order to generate presentable output data, The steps include transferring the output data to the inspection unit (20a-c, 203d), The steps include transferring the input data to the inspection unit (20a to c, 203d), The inspection unit (20a to c, 203d) performs the step of generating comparison data from a comparison of the input data with the output data, Equipped with, The steps include compiling data using cryptographic components (32a-c, 212d) to form the operation dataset comprising at least two of the following three types of data: input data, output data, and / or comparison data, To provide the tamper-proof operation dataset, the steps include: applying tamper-proof processing to the operation dataset using the cryptographic components (32a to c, 212d); A method for providing this.

2. The method according to claim 1, wherein the output data is transferred to the cryptographic components (32a to c, 212d) in the form of image data.

3. The method according to claim 2, wherein the image data comprises video data.

4. The method according to claim 1, wherein the output data is transferred to the cryptographic component in the form of fingerprint data generated from image data by the computing units (29a-c, 204d).

5. The method according to claim 1, wherein the output data is transferred to the cryptographic component (32a to c, 212d) in the form of processed values ​​generated from image data by the computing unit (29a to c, 204d).

6. The method according to claim 1, wherein, in the compilation of the operation dataset, all three types of data from the following comparison data, output data, and input data are incorporated into the operation dataset.

7. A method for creating a tamper-proof operation input data set during the operation of a display device (200d) having display units (16a to c, 206d) and an input unit (205d) arranged on the display unit (206d), The steps include transferring the input data to the computing unit (202d) in order to generate presentable output data, The steps include transferring the output data that can be presented to the inspection unit (203d), The steps include: reading the input unit (205d) as input data, thereby capturing input performed in the input unit (205d), such as touch input; The steps include transferring the input data to the inspection unit (203d), The inspection unit (203d) performs the steps of generating input matching data from at least the merge process of the input data and the output data, Equipped with, The steps include: merging the data from the input matching data and the input data using the cryptographic component (212d) to form the operation input dataset, and performing tamper-proof processing on the operation input dataset using the cryptographic component (212d) to provide the tamper-proof operation input dataset; A method for providing this.

8. The method according to claim 7, wherein in the compilation of the operation input dataset, the input data and / or the output data are further incorporated.

9. The method according to claim 7, wherein, in the compilation of the operation input dataset, comparison data created by the inspection unit (203d) from a comparison of the input data with the output data is further incorporated.

10. The method according to claim 1 or 7, wherein, in creating the operation dataset or the operation input dataset, index data, preferably timestamp data, count data and / or reference data are further incorporated into the operation dataset or the operation input dataset.

11. The method according to claim 1 or 7, wherein the prevention of tampering with the operation dataset or the operation input dataset is carried out at least to some extent by asymmetric encryption using an elliptic curve cryptography (ECC) algorithm or a Rivest-Shamir-Edelman (RSA) cryptography algorithm.

12. The method according to claim 1 or 7, wherein the tamper-proof operation dataset or the tamper-proof operation input dataset is stored.

13. The method according to claim 1 or 7, which is performed at least to some extent repeatedly.

14. A dataset generator having cryptographic components (32a-c, 212d), wherein the cryptographic components (32a-c, 212d) are designed to create an operational dataset and / or an operational input dataset from the operation of a display device (10a-c, 200d), and are designed to provide tamper-proof protection to the operational dataset and / or the operational input dataset.

15. A safety system having a data set generator (30a-c, 210d) according to claim 14, comprising an inspection unit (20a-c, 203d) designed to generate input matching data from a merge process of input data and output data, and / or generate comparison data from a comparison of input data with output data.

16. A safety system having a data set generator (30a to c, 210d) according to claim 15 or 16, comprising a recording device unit (50a to c, 230d) designed to store the operation data set and / or the operation input data set.

17. A safety system having a data set generator (30a to c, 210d) according to claim 15 or 16, comprising a data backup interface (36a to c, 236d) designed to output the operation data set and / or the operation input data set.

18. A display device having a safety system (40a-c, 240d) according to any one of claims 15 to 17.

19. An operator control terminal having the display device (10a to c, 200d) according to claim 18.

20. A vehicle having the operator control terminals (70a to c, 270d) according to claim 19, particularly a track vehicle.

21. A signal box for controlling a railway system, having the operator control terminals (70a-c, 270d) described in claim 19, or a control station for process control in an industrial plant, having the operator control terminals (70a-c, 270d) described in claim 19.

Images