Sensor Data Aggregation and Signing for Tamper Detection

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing technologies are inefficient in protecting the authenticity of measurement data from sensor devices with limited computing resources, making them vulnerable to forgery and tampering, especially in industrial processes where environmental compliance and controlled substances are concerned.

Innovation Solution

A method that aggregates measurement data using a predetermined function and signs the aggregate value only under specific conditions, reducing computational expense by shifting the burden of authentication to a more resource-rich device, and incorporating configuration information to ensure data integrity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If cryptographic operations are performed on every measurement data point to ensure authenticity, then data integrity is protected, but computing resource consumption increases significantly

Engineering Contradiction:

Improvedata authenticityVSAvoidcomputing resource consumption

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent combines multiple measurement data points into a single aggregate value (e.g., hash or summary statistic) before applying cryptographic operations. This merging approach maintains data authenticity protection while reducing the frequency and computational cost of cryptographic operations from every data point to periodic aggregates.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The patent performs preliminary aggregation of measurement data into compressed representations (such as hash values or statistical summaries) before cryptographic verification. This preliminary processing reduces the data volume requiring expensive cryptographic operations, thereby lowering computing resource consumption while preserving integrity verification capability.

Inventive Principle:

Principle #10Preliminary action

2Reliability

If cryptographic operations are performed on every measurement data point, then data integrity is ensured, but processing speed decreases

Engineering Contradiction:

Improvedata integrityVSAvoidprocessing speed

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

Multiple measurement data points are merged into a single aggregate value that represents the collective integrity of the original data set. Cryptographic operations are then applied to this single aggregate rather than to each individual data point, significantly improving processing speed while maintaining integrity verification.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The aggregation function performs preliminary compression of measurement data into a compact representation before cryptographic operations. This preliminary action reduces the computational burden and increases processing speed, as cryptographic operations are performed on smaller aggregated data rather than raw measurement streams.

Inventive Principle:

Principle #10Preliminary action

3Use of energy by moving object

If aggregate values are computed from multiple measurement data points, then computing resources are saved, but the ability to detect specific tampered data points is reduced

Engineering Contradiction:

Improvecomputing resource consumptionVSAvoidtampering detection precision

Core Design Contradiction:

Use of energy by moving objectVSDifficulty of detecting and measuring

Solution Approach 1:

The patent incorporates feedback mechanisms where the aggregate value includes information about the scope and timing of covered measurements. This feedback enables verification systems to understand which data points are covered by each aggregate, allowing for targeted re-verification of suspicious periods while maintaining resource efficiency for routine verification.

Inventive Principle:

Principle #23Feedback

Solution Approach 2:

The patent segments the measurement data stream into distinct aggregates with defined boundaries and scopes. Each aggregate covers a specific time period or set of measurements, allowing verification systems to focus on specific segments when investigating potential tampering rather than analyzing all data uniformly, thus improving detection precision without increasing overall computational burden.

Inventive Principle:

Principle #1Segmentation

Data Source

PatentEP4002179B1Protecting the integrity of measurement data acquired by a sensor device

Publication Date: 2025.01.01 ABB (SCHWEIZ) AG

Figure 1
Figure 2~3

AI summary

A method (100) for protecting the integrity of measurement data (2) acquired by a sensor device (1), comprising: • in response to measurement data (2) being acquired (105), determining (110), by the sensor device (1), whether an aggregate value (3) has already been generated, and: ∘ if an aggregate value (3) has not yet been obtained, mapping (120), by means of a predetermined aggregation function (H) that takes measurement data (2) as a mandatory argument and a previously generated aggregate value (3) as an optional argument, the measurement data (2) to an aggregate value (3); whereas ∘ if an aggregate value (3) has already been obtained, mapping (130), by means of said aggregation function (H), the combination of this aggregate value (3) and the measurement data (2) to a new aggregate value (3'); and • in response to a predetermined condition (140) being met, ∘ computing (150), using a secret key of the sensor device (1), a signature (4) of the aggregate value (3); and ∘ outputting (160) the signature (4) via a communication interface of the sensor device (1), and/or ∘ storing (170) the signature (4) in a memory. A corresponding method (200) for authenticating measurement data (2).