Secure Consumption Data Module Authorization via Segmented Keys

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing consumption data management systems face challenges in achieving operational flexibility with reduced maintenance intensity and energy efficiency, particularly in battery-operated smart meters where software authorizations and secure data transmission are critical.

Innovation Solution

A consumption data module with a memory for consumption data, a control unit, communication means, and a metrological measuring unit, featuring a module for managing software authorizations through hardware and/or software components, using different keys for various software authorizations to protect metrological properties and enable secure data transmission.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If different keys are provided for different software authorizations to protect metrological properties, then security and operational flexibility are improved, but device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the authorization system by providing different keys (first key, second key, third key) for different software authorizations (first, second, third authorizations). Each key is associated with specific operational permissions, allowing fine-grained security control without requiring a single complex authorization mechanism. This segmentation resolves the contradiction by making the security system modular and manageable through distinct key-authoriation pairs.

Inventive Principle:
Principle #1Segmentation

2Reliability

If software authorizations with different keys are implemented for secure data transmission, then data security is improved, but energy consumption increases

Engineering Contradiction:
Improvedata securityVSAvoidenergy consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent implements dynamic key selection based on the required authorization level. The consumption data module selectively uses different keys depending on the operation being performed - using stronger encryption and more keys only when necessary (e.g., for metrological property protection) and simpler mechanisms for routine operations. This dynamic approach maintains data security while minimizing energy consumption by avoiding unnecessary cryptographic overhead for all operations.

Inventive Principle:
Principle #15Dynamics

3Adaptability or versatility

If multiple keys and software authorizations are used for protecting metrological properties, then operational flexibility is improved, but maintenance intensity increases

Engineering Contradiction:
Improveoperational flexibilityVSAvoidmaintenance intensity
Core Design Contradiction:
Adaptability or versatilityVSEase of repair

Solution Approach 1:

The patent segments maintenance tasks by authorization level. Each key and authorization pair can be independently managed, updated, or revoked without affecting other parts of the system. For example, the first key and first authorization can be maintained separately from the second key and second authorization, allowing targeted maintenance actions. This segmentation reduces overall maintenance intensity by enabling modular updates rather than requiring system-wide maintenance for any single key management change.

Inventive Principle:
Principle #1Segmentation

4Adaptability or versatility

If write permissions are granted for changing metrological properties, then operational flexibility is improved, but security risks increase

Engineering Contradiction:
Improveoperational flexibilityVSAvoidsecurity risks
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent applies the principle of local quality by granting write permissions locally and selectively through specific authorizations rather than universally. The second key and second authorization provide write permissions for changing metrological properties, but this capability is localized to authorized entities only. Different parts of the system have different permission levels - some components have read-only access while others have controlled write access. This localized permission structure enables operational flexibility where needed while maintaining security by restricting write capabilities to specific, authorized contexts.

Inventive Principle:
Principle #3Local quality

Data Source

PatentEP3521766B1Method for secure operation of an electronic consumption data module and consumption data module
Publication Date: 2021.06.30 DIEHL METERING SYSTEMS GMBH
  • EP3521766B1 patent drawingFigure 1~1b
  • EP3521766B1 patent drawingFigure 2
  • EP3521766B1 patent drawingFigure 3

AI summary

The invention relates to a method for operating an electronic consumption data module (1), wherein the consumption data is transmitted to a receiver via a communication system, and various keys (S1-n) are provided for different software authorizations, characterized in that command authorizations are defined in the consumption data module (1) as software authorizations. Furthermore, the invention relates to a consumption data module (1) with a memory (14), a control and/or regulation unit (15), communication means (11) for consumption data transmission, and wherein various keys (S1-n) are provided for different software authorizations, characterized in that command authorizations are defined in the consumption data module (1) as software authorizations, and the consumption data module (1) is operable, in particular, by a method according to at least one of the method claims.