Information system and method for operating an information system

Abstract

The invention relates to an information system (100) comprising - at least one log message receiving unit (10), - at least one log message memory (30) and - at least one encryption system (20), wherein the log message receiving unit (10) is designed to receive log messages (PN), in particular from vehicles (50), which each have a character string with a plurality of sub-strings (TZ), wherein at least one sub-string (TZ) has at least one descriptive element (DE) and a message content (NI), wherein the encryption system (20) is designed to: a) analyse at least one of the received log messages (PN) and select at least one message content (NI), preferably as confidential message content, using at least one descriptive element (DE) in the at least one log message (PN); b) encrypt the selected message content (VN); c) replace the selected message content (VN) with the encrypted message content (VVN) to generate a modified log message, wherein preferably the encrypted message content (VVN) is preceded by an initial delimiter (AZ) and / or followed by an end delimiter (EZ); d) save the modified log message (PN(VVN)) in the log message memory (30).

Description

[0001] Information system and method for operating an information system

[0002] Description

[0003] The invention relates to an information system comprising at least one protocol message receiving unit, at least one protocol message memory and at least one encryption system, according to patent claim 1. Furthermore, the invention relates to a method according to patent claim 13.

[0004] It is known, for example, to create logs when monitoring a vehicle fleet and to store these logs for a certain period of time.

[0005] The logs can be used to analyze errors or offer new services. Such logs can also contain confidential data, such as a vehicle's location, which could allow, for example, the creation of a movement profile of a specific person or at least their vehicle.

[0006] Log data stored in this way is accessed by various users. To date, it has been known to authorize access to log data for specific users according to a role-rights concept. However, even with the application of role-rights concepts, it is unavoidable that users accessing log data may also view information that is contained as partial information in the log data and is fundamentally not required by the user.

[0007] Particularly when saving log messages that consist of long character strings comprising multiple substrings, it is not possible with simple role / rights concepts to determine which users are viewing or have viewed specific log messages or sub-messages of the log data. This is particularly the case if the role / rights concept is to be kept simple and the log messages are to be made available as a whole and no separate storage of individual log sub-messages is to be carried out. This would require saving different data in different memories. In many cases it is sufficient to know that a specific log message arrived from a specific vehicle at a specific time. The exact message content then often plays only a subordinate role.Based on the prior art, the object of the present invention is to provide an information system that allows access to and analysis of protocol messages while ensuring a high degree of data protection. In particular, large amounts of data should be queryable without having to disclose private information.

[0008] Furthermore, it is an object of the present invention to provide a corresponding method for operating such an information system.

[0009] The present object is achieved with regard to the information system by the subject matter of patent claim 1, with regard to a method by the subject matter of claim 13 and with regard to a computer-readable storage medium by the subject matter of patent claim 16.

[0010] In particular, the task is solved by an information system comprising

[0011] - at least one protocol message receiving unit,

[0012] - at least one log message store and

[0013] - at least one encryption system, wherein the protocol message receiving unit is designed to receive protocol messages, in particular from vehicles, each having a character string with a plurality of sub-character strings, wherein at least one sub-character string has at least one descriptive element and a message content, wherein the encryption system is designed to a) analyze at least one of the received protocol messages and, using at least one descriptive element in the at least one protocol message, select at least one message content, preferably as confidential message content; b) encrypt the selected message content;c) to generate a modified protocol message, replacing the selected message content with the encrypted message content, preferably preceded by a start delimiter and / or followed by an end delimiter; d) storing the modified protocol message in the protocol message memory;

[0014] One idea of ​​the invention is to store protocol messages in a protocol message memory, wherein a selected message content is stored in encrypted form in the protocol message. This selected message content can also be referred to as confidential message content and is stored in encrypted form in the protocol message, wherein the encrypted (confidential or selected) message content is stored in the modified protocol message together with a start delimiter and / or an end delimiter. The protocol message can therefore be partially encrypted, with only the message content being modified - encrypted - where this is absolutely necessary. Overall, the protocol message can remain essentially unchanged, which enables further evaluation according to different requirements.

[0015] One aspect of the invention is that (partial) encryption can be performed without in-depth analysis of the protocol message. This is particularly advantageous when the protocol message is long and contains numerous descriptive and / or content elements.

[0016] In one embodiment, the protocol message is stored essentially unchanged except for the encryption. In another embodiment, at least one timestamp can be stored separately from the rest of the protocol message, preferably including the payload data.

[0017] A protocol message is a string with multiple substrings. A substring contains at least one descriptive element and a message content. A descriptive element is a descriptive element that specifies the type or category of, for example, subsequent message content. Such message content can be transmitted in XML or JSON format.

[0018] In one embodiment, a substring is preferably formed from at least one descriptive element and at least one message content. For example, a substring can comprise exactly one pair of descriptive element and message content. The protocol message preferably has multiple substrings. The message content of a substring can also be referred to as a partial message content, since the message content of a substring is a partial message of the protocol message.

[0019] At least one message content in the character string, which can also be referred to as a partial message, is a selected message content. The selected message content can therefore be referred to as a selected partial message. The selection can be made according to various criteria. Rule sets can be provided for this purpose. In one embodiment, the message content that should be considered confidential is selected.

[0020] The protocol message receiving unit can be such a unit that receives previously generated protocol messages and optionally processes them further. It is also possible for the protocol message receiving unit to convert received payload data into protocol messages and optionally process them further. In this text, the terms "protocol message receiving unit" and "protocol message generating unit" are used synonymously.

[0021] The encryption system is preferably designed such that the modified protocol messages are stored in encrypted form in the protocol message memory. In other words, the modified protocol message, which has multiple message contents, can itself be stored in encrypted form in the protocol message memory. The selected or confidential message content—or the selected or confidential partial message—is thus also stored as part of the modified protocol message in the protocol message memory.

[0022] When encrypting the selected message content and thus generating the modified protocol message, a start delimiter and / or an end delimiter is preferably assigned to the encrypted message content. The encrypted message content is thus preferably stored in the protocol message memory together with the start delimiter and / or the end delimiter.

[0023] In other words, the selected message content is stored together with other (non-confidential) content as an encrypted log message in the log message store. The confidential message content is also encrypted within the log message itself.

[0024] This makes it possible for access to a decrypted protocol message—where the confidential message content remains in encrypted form—to view the (non-selected or non-confidential) message content, while the selected message content can only be viewed upon additional decryption of the selected message content. At the same time, the original structure of the protocol message is retained. According to the invention, it is also possible to establish further access authorization via the inventive security concept, which makes it possible to provide different users with different selections of protocol messages.

[0025] The inventive security concept allows the protocol message to be stored in the same memory. No additional memory is required to store the at least one selected message content. The protocol message also needs to be fragmented for parallel storage in multiple memories. This contributes to minimizing storage space and thus costs. Furthermore, hardly any preprocessing steps, such as the complete parsing of the protocol message, are necessary.

[0026] Due to the preferred assignment of a start delimiter and / or an end delimiter to the encrypted message content in one embodiment, the information system can automatically detect that encrypted message content is present within the protocol message. This enables a simple decryption process.

[0027] In one embodiment of the invention, the encryption system is designed such that the selected message content is encrypted using a first key, in particular is stored in encrypted form in the protocol message memory.

[0028] The encryption system may perform a pattern matching to select the at least one message content to be selected in step a).

[0029] When performing a pattern comparison, a discrete structure of a message content can be recognized based on a message pattern in the sense of pattern matching, whereby a previously defined discrete structure can be used to distinguish between message content to be selected and message content not to be selected.

[0030] Furthermore, it is intended to recognize the descriptive elements of the individual substrings and compare them with previously determined descriptive elements. It is possible to determine or define descriptive elements in the encryption system as descriptive elements that characterize a message content to be selected. If the encryption system recognizes such a previously determined descriptive element, the encryption system can recognize the message content following the descriptive element as the message content to be selected and encrypt it accordingly.

[0031] In one possible embodiment of the invention, the information system comprises a decryption server which is designed to receive an access request to at least one protocol message, in particular to at least one encrypted message content, from a user, to decrypt the encrypted message content, in particular using a second key, and to return the decrypted message content, in particular as part of the protocol message, in response to the access request.

[0032] The decryption server can process an access request from a user who wants to access at least one log message.

[0033] Preferably, the decryption server can first require user authentication. In other words, upon use and / or access request, the user is first authenticated and checked to determine whether and which access rights are granted to the user. Authentication can be performed, for example, by entering a password and / or access key.

[0034] Access to a protocol message, in particular to confidential message content, can be understood as reading and / or retrieving.

[0035] For example, if the user has first (low) level access rights, the user is granted access to the log message store, in particular to the log messages contained therein. In this case, the user can access the modified log messages stored in the log message store. The at least one selected message content is stored encrypted within the modified log message. The user cannot access the decrypted selected message content, but only the selected message content in encrypted form.

[0036] If a second (higher) level of access rights is present, the selected message content is decrypted. In other words, the selected message content is decrypted within the protocol message, provided the user has the corresponding access key. It is possible to provide a separate unit, such as a decryption server, for decrypting the encrypted message content. However, the decryption server does not necessarily have to be a separate software component, or even with its own hardware. In one embodiment, the same software component responds to requests with different access rights.

[0037] It is possible that the encryption is carried out with a first key and the decryption with a second key (asymmetric encryption method).

[0038] Preferably, the decryption server is configured to recognize the characters located between the start delimiter and the end delimiter as encrypted message content when decrypting the encrypted message content.

[0039] Due to the use of a start delimiter and an end delimiter and an assignment to the encrypted message content, the encrypted message content can be easily recognized as such. This reduces the computing power required, allowing the decryption of encrypted selected message content to be carried out quickly, especially with appropriate user authentication. Furthermore, protocol messages of any structure or format can be processed according to the invention.

[0040] In one embodiment of the invention, the decryption server can be communicatively connected to a key database and / or have a key database, wherein at least the second key is stored in the key database. Preferably, the information system, preferably the decryption server, is designed to generate the first key and the second key at regular time intervals. Thus, different key pairs can be used for different sections in the protocol message memory. Only in one embodiment are these sections defined by time, for example the processing time of the protocol message, the generation time, possibly in a vehicle, or the reception time. In other embodiments, the key pair used can depend on the vehicle class, a user group, or other parameters, e.g., those derived from message content.It is possible for the information system according to the invention to have an access log memory configured to store a user's access request and / or a user's access to an encrypted message content. The access log memory can, in particular, be configured as part of the decryption server and / or be communicatively connected to the decryption server.

[0041] Preferably, in particular, each access request by one or more users to at least one encrypted message content is stored. Alternatively or additionally, it is possible for each access by one or more users to a decrypted selected message content to be stored.

[0042] Using the stored data, it is possible to trace, even at a later time after the access request and / or access, which user submitted the corresponding access requests and / or had access to a decrypted, selected message content. This makes it possible to trace data leaks or, for example, unauthorized data sharing.

[0043] The decryption server can be configured to query the reason for accessing an encrypted message content. Preferably, a user-provided reason can be stored in the access log memory.

[0044] It is possible that the initial delimiter and / or the end delimiter are included, and the decryption server uses the encryption information to identify a key, especially the second key, for decryption. This makes it possible to trace when the encryption was performed and with which encryption criteria.

[0045] The selected message content of the protocol message or the encrypted message content of the modified protocol message may, for example, be a position indication of a vehicle, in particular a GPS position indication.

[0046] A message content, in particular a non-selected message content, of a protocol message can be a chassis number, in particular a VIN (vehicle identification number) and / or a vehicle error code and / or a tire pressure of a vehicle and / or a battery charge level of a vehicle and / or an indication regarding the activation of a vehicle light and / or an indication regarding the filling level of a vehicle tank.

[0047] A protocol message of the information system according to the invention can have multiple (non-selected) message contents as well as multiple selected message contents. Preferably, a protocol message has multiple (non-selected) message contents and at least one selected message content. For example, the protocol message can contain a chassis number and information about a vehicle error code, with the protocol message additionally containing a vehicle position information.

[0048] Preferably, the log message includes a timestamp and / or date information. This allows for inference as to when a generating system generated the original data logged in the log message.

[0049] The generating system could, for example, be a vehicle. It is also possible that the generating system could be a backend server.

[0050] The information system according to the invention makes it possible to provide developers with access to protocol messages from one or more vehicles. The technical vehicle information, e.g., error codes and / or battery charge levels and / or tire pressure, etc., can be viewed by a developer, allowing developers to correct errors accordingly. At the same time, the automatically recorded position data of a vehicle is made available only to authorized persons. It is therefore not possible for vehicle developers to simultaneously view or process information regarding the position data in an unauthorized form unless they possess the appropriate access authorization for the selected message content.

[0051] It is possible for the protocol message to have at least two different selected message contents. In this case, it is possible for a first selected message content to be assigned an access right of a second level, and for at least a second selected message content to be assigned an access right of at least a third level. In other words, each selected message content can be assigned its own access right level, so that different selected message contents can be made available to a different user group, with all message contents of a protocol message—i.e., both the non-selected message contents and the different selected message contents—being stored in the same memory, and no different memory structures needing to be created.

[0052] In one embodiment of the invention, it is possible for the information system to store the modified protocol message in association with a timestamp and for the decryption server to use the timestamp to select the / a second key.

[0053] A further aspect of the invention relates to a method, the method comprising the following steps: a) receiving at least one protocol message (PN) with descriptive elements (DE) and message contents (NI); b) analyzing at least one of the received protocol messages (PN) and, using at least one descriptive element (DE), selecting at least one message content (NI), preferably as confidential message content, in the at least one protocol message (PN); c) encrypting the selected message content (VN); d) generating a modified protocol message (PN(VVN)) by replacing the selected message content (VN) with the encrypted message content (VVN), wherein preferably an initial delimiter (AZ) is preceded by the encrypted message content (VVN) and / or an end delimiter (EZ) is added after the encrypted message content (VVN);e) storing the modified protocol message (PN(VVN)), in particular for further evaluation;

[0054] Similar or identical advantages arise as those already stated in connection with the information system according to the invention.

[0055] In particular, the method according to the invention can comprise at least one method step as already specified in connection with the information system according to the invention. The method can be used to operate with the previously described embodiments of the information system.

[0056] For example, the descriptive element of a selected message content might be "position." A descriptive element of a non- or less confidential message content might be "VIN" and / or "tire pressure" and / or "battery charge level" and / or "light" and / or "fuel level."

[0057] To recognize a selected message content, the encryption system or method can perform a pattern comparison, for example in the sense of pattern matching.

[0058] In the case of a position specification, in particular in the case of a GPS position specification, the position information is stored according to the following pattern, where D stands for one position, * for any number of additional positions and W stands for a space:

[0059] / Position=\D\D.\D\D\D*,\D\D.\D\D\D*\W /

[0060] If such a pattern is found or recognized during pattern matching, the encryption system can recognize the selected message content, namely the position information, and encrypt it accordingly.

[0061] It is possible for at least one descriptive element from a selection of several descriptive elements to be determined as a descriptive element of a selected / to-be-selected message content, wherein the encryption system recognizes the selected / to-be-selected message content upon recognition of such a preselected descriptive element.

[0062] In one embodiment, the method according to the invention provides that a user submits an access request to at least one selected message content to a decryption server, wherein the decryption server queries the user regarding the reason for accessing the selected message content and preferably stores an indication of the reason communicated by the user in a / the access log memory.

[0063] The method according to the invention enables a user, when accessing a protocol message, to access only the non-selected message content unencrypted, depending on the existence of an access right, or, if a corresponding access right exists, to also access the selected message content in unencrypted form. This object is further achieved by a computer-readable storage medium. The storage medium can contain instructions that cause at least one processor to implement a method according to one of the preceding embodiments when the instructions are executed by the at least one processor.

[0064] Similar or identical advantages arise as those described in connection with the procedure.

[0065] The invention is described below using exemplary embodiments, which are explained in more detail with reference to the figures. Herein:

[0066] Fig. 1 is a schematic representation of an information system according to a first embodiment;

[0067] Fig. 2 is a schematic representation of an information system according to a second embodiment; and

[0068] Fig. 3a and 3b Representations of protocol messages in partially encrypted form.

[0069] In the following description, the same reference numbers are used for identical and equivalent parts.

[0070] Fig. 1 shows an information system 100 according to a first embodiment. The information system 100 includes a protocol message receiving unit 10, a protocol message memory 30, and an encryption system 20. An optional decryption server 40 is also configured and illustrated.

[0071] The following explains how such an information system 100 according to the invention can be operated.

[0072] The protocol message receiving unit 10 is configured to receive protocol messages PN. These protocol messages PN each comprise a character string with multiple substrings TZ, as shown in more detail in Figs. 3a and 3b. A substring TZ comprises at least one descriptive element and a message content NI. Additionally, the protocol message PN may comprise a timestamp ZS. At least one message content NI of the character string is a confidential message content VN, which should not be visible to everyone.

[0073] The protocol messages PN are continuously encrypted using the encryption system 20, also shown. The encryption system 20 recognizes the confidential message content VN within the character string, selects it, and encrypts it. The encrypted message content VNN is entered at the corresponding position in the protocol message PN, resulting in a modified protocol message PN(VVN).

[0074] When encrypting the selected message content VN, a start delimiter AZ and an end delimiter EZ can be assigned to this encrypted message content VVN, so that the encrypted message content VVN is stored together with the start delimiter AZ and the end delimiter EZ in the protocol message memory 30.

[0075] In the described embodiment, the encryption is carried out by means of a first (“public”) key S1, which is assigned to a key pair comprising the first key S1 and a second (“private”) key S2.

[0076] A plurality of protocol messages PN are preferably stored in the protocol message memory 30, wherein each protocol message PN preferably has at least one encrypted message content VVN (see Fig. 3b).

[0077] A first user 80a can directly access the protocol message memory 30. This access can be secured using known methods. Direct access to the protocol message memory 30 is for this purpose only available in encrypted form (encrypted message content VVN) as part of the protocol message PN(VNN). In one embodiment, access to the information in the protocol message memory 30 can be unencrypted.

[0078] In one embodiment, decryption of the protocol message PN(VNN) is not possible outside the system.

[0079] In the illustrated embodiment, the information system 100 comprises a decryption server 40 configured to respond to an access request from a second user 80b to at least one protocol message PN, in particular to at least one selected message content VN, namely an encrypted selected message content VVN. The decryption server 40 can thus be configured to restore the original protocol message (prior to encryption by the encryption server 30).

[0080] When submitting the access request, the second user 80b can be forced to transmit an access key Sx. The decryption server 40 checks whether the access key Sx authorizes the second user to view the requested protocol message in unencrypted form. In this case, the decryption server 40 decrypts the encrypted message content VVN contained in the encrypted protocol message P(VNN) and returns a correspondingly reconstructed protocol message PN.

[0081] In one embodiment, an access log memory 45 is provided, which stores access requests from users 80a, 80b and / or successful accesses to a decrypted message content VN. Storing the access requests and / or the successful accesses in the access log memory 45 enables subsequent analysis of the queried log messages PN per user 80. This makes it possible to detect data leaks or unauthorized disclosure of information. In general, attempts to access the decryption server 40 can be secured much more strictly.

[0082] In a possible embodiment of the invention, the decryption server 40 can also be designed to perform a query regarding the reason for accessing a selected message content VN and preferably to store an indication of the reason communicated by the user 80b in the access log memory 45.

[0083] Fig. 2 shows a further embodiment of an information system 100 according to the invention.

[0084] In this case, a vehicle 50 as a data generating system sends data to the protocol message receiving unit 10. With the aid of the encryption system 20 and the protocol message memory 30, encrypted protocol messages PN(VNN) are generated with selected message contents VVN present therein in encrypted form.

[0085] With the help of the decryption server 40, the second user 80b can, as in the previous embodiment, request access to the encrypted selected message content VVN. If the user 80b possesses a suitable password (Pass), the encrypted selected message content VVN is decrypted, granting the user 80b access to the decrypted message content VN. In this embodiment, access to the protocol messages P(VNN) with encrypted message content VNN can also be made via the decryption server 40. In this case, the decryption server 40 determines that the first user does not have sufficient authorization and simply returns the encrypted message content VNN as part of the protocol messages P(VNN).

[0086] Preferably, the first key S1 ("public") and the second key S2 ("private") are regenerated at regular time intervals, wherein both the newly assigned first and second keys S1, S2, as well as the expired first and second keys (S1, S2) are stored in a key database 60 that is communicatively connected to the decryption server 40. After its generation, the new first key S1 can be distributed to the encryption system 20, so that encryption is carried out with the new first key S1 from the time of distribution. When answering the requests, the decryption server 40 in this constellation must determine, for example based on a timestamp, which second key S2 is suitable for decrypting a specific protocol message PN(VNN).The corresponding lookup for a suitable second key S2 and the decryption naturally only takes place if the second user is correspondingly authorized (cf. embodiments according to Fig. 1 and 2).

[0087] Fig. 3a shows an example of how the protocol messages PN are received with a time delay by a protocol message receiving unit 10 and encrypted by means of the encryption system 20 in order to be stored in this form in the protocol message memory 30 (see Fig. 3b). Fig. 3a shows 10 protocol messages PN as an example. One protocol message PN is shown per line. Each protocol message PN1 - PN10 has a timestamp ZP and three substrings TZ1, TZ2 and TZ3. Each substring TZ has a descriptive element DE and a message content NI. The substring TZ1 contains the descriptive element (DE) Car. This is followed by the message content NI associated with the descriptive element Car in the form of a vehicle key or a VIN number. The substring TZ2 relates to the status of the doors.Specifically, the descriptive element DE of the substring TZ2 is “Doors”, with the corresponding message content NI indicating whether the doors are closed or open.

[0088] The descriptive element DE of the substring TZ3 is the position. This is followed by the message content NI in the form of a GPS position specification. This message content is a selected message content VN. Based on the descriptive element DE and / or the playback pattern of the position data specification, it is possible for the encryption system 20 to recognize the message content NI of the third substring TZ3 as a selected message content VN and encrypt it.

[0089] After encryption within the protocol message PN, the selected message VN is available in encrypted form (see VVN), as shown in Fig. 3b.

[0090] The protocol messages PN1 - PN10 are stored encrypted as such in the protocol message memory 30. Once access to the protocol messages PN1 - PN10 is granted, the timestamp ZS and the first and second substrings TZ1 and TZ2 are readable. The selected message content VN of the third substring TZ3, however, is encrypted, so that the third substring TZ3 has the descriptive element DE "Position" as well as the encrypted message content VVN. The encrypted selected message content VVN is assigned a start delimiter AZ and an end delimiter EZ. The start delimiter AZ is: §. The end delimiter EZ in this case is: NTY3.

[0091] Decryption is simplified using the initial delimiter AZ and the final delimiter EZ. This is performed, as already described in connection with Figs. 1 and 2, using the decryption server 40. If the decryption server 40 determines that the access key Sx matches the second key S2, decryption can take place between the initial delimiter AZ and the final delimiter EZ.

[0092] Furthermore, in this case, the end delimiter EZ contains information about the first key S1. The end delimiter consists of four characters, with the last two characters each representing the version of the first key S1 used during encryption. Therefore, the end delimiter EZ of protocol messages PN1 - PN8 is "NTY3." Starting with PN9, however, a modified first key S1 was used, so the end delimiter EZ is "NTZ2" starting with PN9.

[0093] In another embodiment, the initial delimiter AZ may be a dollar sign (“$”), with the encrypted message content VVN enclosed in square brackets (“[“ and “]”).

[0094] In another embodiment, the initial delimiter AZ is "$[N]," where N is a natural number indicating a key number and referring to a first key S1 used or a second key S2 to be used for decryption. Generally, the initial delimiter AF, like the final delimiter EZ, can include information about the encryption.

[0095] With the coding method described last, the following protocol message PN(VNN) could result for a first key pair, where the “1” as the third character refers to the first key pair: 2024-05-26 13:34 Car VIN1234: Doors=Closed Position=

[0096] $[1 U2FsdGVkX1 / MS815jVTFrA8PEW4QghduSEQ4IEiLrD3QYpwMhCME+A==]

[0097] For a second key pair (see "2" as the third character of the encrypted message content VNN), a corresponding protocol message PN(VNN) could have the following format: 2024-05-26 13:34 Car VIN1234: Doors=Closed Position= $[2U2FsdGVkX1 / mTCcmzd7UV7hBCsXWI21sv1QljC4MG1TXqA1 iAHqApQ==]

[0098] At this point, it should be noted that all of the parts described above, each on its own—even without additional features described in the respective context, even if these have not been explicitly identified as optional features in the respective context, e.g., by using: in particular, preferably, for example, for example, if necessary, parentheses, etc.—and in combination or any subcombination, are to be regarded as an independent embodiment or development of the invention, as defined in particular in the introduction to the description and the claims. Deviations from this are possible. Specifically, it should be noted that the word "in particular" or parentheses do not indicate features that are mandatory in the respective context. List of reference symbols:

[0099] 10 Protocol message receiving unit

[0100] 20 Encryption system

[0101] 30 log message storage

[0102] 35 display unit

[0103] 40 decryption servers

[0104] 45 Access log storage

[0105] 60 key database

[0106] 80a, 80b users

[0107] 100 Information system

[0108] AZ initial limiter

[0109] DE Descriptive element

[0110] EZ End Limiter

[0111] NI message content

[0112] PN protocol message

[0113] S1 first key

[0114] S2 second key

[0115] Sx access key

[0116] TZ substring

[0117] VN Selected news content

[0118] VVN Encrypted selected message content

[0119] ZS timestamp

Claims

Claims 1. Information system (100) comprehensive - at least one protocol message receiving unit (10), - at least one protocol message memory (30) and - at least one encryption system (20), wherein the protocol message receiving unit (10) is designed to receive protocol messages (PN), in particular from vehicles (50), each having a character string with a plurality of sub-character strings (TZ), wherein at least one sub-character string (TZ) has at least one descriptive element (DE) and a message content (NI), wherein the encryption system (20) is designed to a) analyze at least one of the received protocol messages (PN) and, using at least one descriptive element (DE) in the at least one protocol message (PN), select at least one message content (NI), preferably as confidential message content; b) encrypt the selected message content (VN);c) to generate a modified protocol message, replacing the selected message content (VN) with the encrypted message content (VVN), preferably preceded by an initial delimiter (AZ) and / or followed by an end delimiter (EZ) of the encrypted message content (VVN); d) storing the modified protocol message (PN(VVN)) in the protocol message memory (30); 2. Information system (100) according to claim 1, characterized in that the encryption system (20) is designed to encrypt the selected message content (VN) using a first key (S1).

3. Information system (100) according to claim 1 or 2, characterized in that the encryption system (20) performs a pattern matching to select the message content (VN) in step a).

4. Information system (100) according to one of claims 1 to 3, in particular according to one of claims 2 to 3, characterized by a decryption server (40) configured to receive an access request to at least one protocol message (PN), in particular to at least one encrypted message content (VVN), from a user (80), to decrypt the encrypted message content (VN), in particular using a second key (S2), and to return the decrypted message content, in particular as part of the protocol message (PN), in response to the access request.

5. Information system (100) according to one of the preceding claims, in particular according to claim 4, characterized in that a / the decryption server (40) is designed such that, when decrypting the encrypted message content (VVN), the characters located between the start delimiter (AZ) and the end delimiter (EZ) are recognized as encrypted message content (VVN).

6. Information system (100) according to claim 4 or 5, characterized by a key database (60) which is in communicative connection with the decryption server (40) and / or is a part thereof, wherein at least the second key (S2) is stored in the key database (40), wherein the information system (100), preferably the decryption server (40), is designed to generate the first key (S1) and the second key (S2), preferably at regular time intervals.

7. Information system (100) according to one of the preceding claims, in particular according to one of claims 4 to 6, characterized by an access log memory (45), in particular as part of the decryption server (40), which is designed to store an access request of a user (80) and / or an access of a user (80) to an encrypted message content (VVN).

8. Information system (100) according to one of claims 4 to 7, in particular according to claim 7, characterized in that the decryption server (40) is designed to query with regard to the reason for accessing an encrypted message content (VN) and preferably storing an indication of the reason communicated by the user (80) in an / the access log memory (45).

9. Information system (100) according to one of claims 2 to 8, characterized in that the start delimiter (AZ) and / or the end delimiter (EZ) Contains encryption information and the decryption server (40) uses the encryption information to identify a key (S1, S2), in particular the second key (S2), for decryption.

10. Information system (100) according to one of the preceding claims, characterized in that the selected message content (VN) is a position indication of a vehicle, in particular a GPS position indication.

11. Information system (100) according to one of the preceding claims, characterized in that a message content (NI) is / are a chassis number, in particular a VIN, and / or a vehicle error code and / or a tire pressure of a vehicle and / or a battery charge state of a vehicle and / or an indication regarding activation of a vehicle light and / or an indication regarding the filling level of a vehicle tank.

12. Information system (100) according to one of the preceding claims, in particular according to one of claims 2 to 11, characterized in that the information system (100) stores the modified protocol message (PN) in conjunction with a time stamp (ZS) and the decryption server (40) uses the time stamp (ZS) to select the / a second key (S2).

13. A method, in particular for operating an information system (100) according to one of claims 1 to 12, comprising the following steps: a) receiving at least one protocol message (PN) with descriptive elements (DE) and message contents (NI); b) analyzing at least one of the received protocol messages (PN) and using at least one descriptive element (DE), selecting at least one message content (NI), preferably as confidential Message content in the at least one protocol message (PN); c) encrypting the selected message content (VN); d) generating a modified protocol message (PN(VVN)) by replacing the selected message content (VN) with the encrypted message content (VVN), wherein preferably an initial delimiter (AZ) is preceded by the encrypted message content (VVN) and / or an end delimiter (EZ) is added after the encrypted message content (VVN); e) storing the modified protocol message (PN(VVN)), in particular for further evaluation.

14. A computer-readable storage medium containing instructions that cause at least one processor to implement a method according to claim 13 when the instructions are executed by the at least one processor.

Images