EP3797491A1 - Commande d'un réseau de données en vue de l'utilisation d'une base de données distribuée - Google Patents

Commande d'un réseau de données en vue de l'utilisation d'une base de données distribuée

Info

Publication number
EP3797491A1
EP3797491A1 EP19745998.5A EP19745998A EP3797491A1 EP 3797491 A1 EP3797491 A1 EP 3797491A1 EP 19745998 A EP19745998 A EP 19745998A EP 3797491 A1 EP3797491 A1 EP 3797491A1
Authority
EP
European Patent Office
Prior art keywords
data
data network
distributed database
network
computing
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
EP19745998.5A
Other languages
German (de)
English (en)
Inventor
Dominik Sachsenhauser
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Siemens AG
Siemens Corp
Original Assignee
Siemens AG
Siemens Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Siemens AG, Siemens Corp filed Critical Siemens AG
Publication of EP3797491A1 publication Critical patent/EP3797491A1/fr
Withdrawn legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/08—Configuration management of networks or network elements
    • H04L41/0803—Configuration setting
    • H04L41/0813—Configuration setting characterised by the conditions triggering a change of settings
    • H04L41/0816—Configuration setting characterised by the conditions triggering a change of settings the condition being an adaptation, e.g. in response to network events
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/602—Providing cryptographic facilities or services
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/604—Tools and structures for managing or administering access control systems
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
    • G06F21/6227—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database where protection concerns the structure of data, e.g. records, types, queries
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/64—Protecting data integrity, e.g. using checksums, certificates or signatures
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
    • H04L43/0876—Network utilisation, e.g. volume of load or congestion level
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3236—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions
    • H04L9/3239—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/50—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using hash chains, e.g. blockchains or hash trees
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/12—Discovery or management of network topologies

Definitions

  • the present invention relates to the control of a data network in order to implement a distributed database within the data network or to extend a distributed database already existing within the data network.
  • the present invention therefore has the task of guaranteeing the integrity (i.e. the veracity and correctness of the information) of a data network as comprehensively as possible.
  • this object is achieved by a method for controlling a data network with regard to the use of a distributed database according to claim 1, by a device according to claim 15, by a computer program product according to claim 17 and by an electronically readable data carrier according to claim 18.
  • the dependent claims define preferred and advantageous embodiments of the present invention.
  • Distributed Ledgers is currently an intensely discussed technology that can be implemented in particular as a distributed database system.
  • applications for decentralized payment systems e.g. Bitcoin
  • new applications are being developed in the financial industry.
  • transactions between companies can be realized without manipulation or a clearing house.
  • Blockchain-protected transaction records include e.g. B. Program code, which can also be referred to as a so-called “smart contract”.
  • the terms “carry out”, “calculate”, “computer-aided”, “calculate”, “determine”, “generate”, “configure”, “reconstruct”, “Control”, “to assign” and the like preferably to actions and / or processes and / or processing steps that change and / or generate data and / or convert the data into other data, the data being represented in particular as physical quantities or can be present, for example as electrical pulses.
  • the expression “computer” or “device” should be interpreted as broadly as possible, in particular to cover all electronic devices with data processing properties.
  • Computers can thus, for example, personal computers, servers, programmable logic controllers (PLC), handheld computer systems, Pocket PC devices, mobile radio devices and other communication devices that can process computer-supported data, processors and other electronic devices for data processing.
  • “computer-assisted” can be understood to mean, for example, an implementation of the method in which, in particular, a processor executes at least one method step of the method.
  • a processor can be understood in connection with the invention, for example, a machine or an electronic circuit device.
  • a processor can be a main processor (English Central Processing Unit, CPU), a microprocessor or a microcontroller, for example an application-specific integrated circuit or a digital signal processor, possibly in combination with a memory unit for storing program instructions, etc. act.
  • CPU Central Processing Unit
  • microprocessor or a microcontroller for example an application-specific integrated circuit or a digital signal processor, possibly in combination with a memory unit for storing program instructions, etc. act.
  • a processor it can For example, an IC (Integrated Circuit), in particular an FPGA (Field Programmable Gate Array) or an ASIC (Application-Specific Integrated Circuit), or a DSP (digital signal)
  • a processor can also be understood to mean a virtualized processor, a virtual machine or a soft CPU. It can also be a programmable processor, for example, which is equipped with configuration steps for executing the aforementioned method according to the invention or is configured with configuration steps such that the programmable processor has the inventive features of the method, the component, the modules, or others Aspects and / or partial aspects of the invention realized.
  • a “storage unit” or “storage module” and the like can be understood in connection with the invention, for example, as volatile memory in the form of random access memory (RAM) or permanent storage such as a hard disk or a data carrier.
  • RAM random access memory
  • permanent storage such as a hard disk or a data carrier.
  • a “module” or a “computing unit” can be understood in connection with the invention, for example, a processor and / or a memory unit for storing program errors.
  • the processor is specially designed to execute the program instructions in such a way that the processor executes functions in order to implement or implement the method according to the invention or a step of the method according to the invention.
  • a module can, for example, also be a node of the distributed database system, which, for example, realizes the specific functions / features of a corresponding module.
  • the respective modules can for example also be designed as separate or independent modules.
  • the corresponding modules can comprise further elements, for example. These elements are, for example, one or more cutting interfaces (e.g. database interfaces, communication interfaces - e.g. network interface, WLAN interface) and / or an evaluation unit (e.g. a processor) and / or a storage unit.
  • data can be compared, checked, processed, assigned or calculated, for example in a computer-assisted and / or automated manner.
  • data can be stored, called up or made available, for example, computer-aided and / or automatically.
  • a first date is assigned a second date using a memory address or a unique identifier (UID), in which, for. B. the first date is stored together with the memory address or the unique identifier of the second date together in a data set.
  • UID unique identifier
  • a “smart contract process” can be understood in particular to mean executing a program code (for example the control commands) in a process through the distributed database system or its infrastructure.
  • a checksum can in particular be a checksum or hash value (s) of a hash tree (eg Merkle Baum, Patricia Baum) a digital signature or a cryptographic message auth identification code can be understood.
  • a cryptographic one can be created on different levels of the database system Protection / manipulation protection for the transactions and the data (records) stored therein can be implemented. For example, if a high level of security is required, the checksums are generated at the transaction level and checked. If less security is required, the checksums are generated and checked at the block level (e.g. over the entire data block or only over part of the data block and / or part of the transactions).
  • the data block checksum can thus secure the transactions, for example, by forming the root checksum from the further checksums.
  • the data block checksum can be calculated in particular for transactions of a specific data block of the data blocks. In particular, such a data block checksum can go into a subsequent data block of the specific data block in order to concatenate this subsequent data block with its previous data blocks, for example, and in particular thus to make it possible to check the integrity of the distributed database system.
  • This can the data block checksum, for example, assume the function of the chaining checksum or is included in the chaining checksum.
  • the header of a data block (e.g. a new data block or the data block for which the data block checksum was formed) can comprise, for example, the data block checksum.
  • transaction checksum can be understood to mean a checksum which is formed in particular via a transaction of a data block.
  • a calculation of a data block checksum for a corresponding data block can be accelerated, since for this purpose transaction checksums already calculated, for example, equal to Leaves of a Merkle tree, for example, can be used.
  • a “chaining checksum” can be understood to mean a checksum which, in particular, specifies or references a respective data block of the distributed database system to the previous data block of the distributed database system (in the specialist literature particularly frequently as “previous block hash”) referred to) [1].
  • a corresponding chaining checksum is formed, in particular for the corresponding preceding data block.
  • a transaction checksum or the data block checksum of a data block can be used, for example, to chain a new data block with an (existing) data block of the distributed database system.
  • a data block can be realized which comprises an integrity-protected part and an unprotected part.
  • integrity-protected means in particular that a change in integrity-protected data can be determined by means of a checksum.
  • the data which are stored, for example, in a transaction of a data block, can in particular be provided in different ways.
  • the data e.g. B. user data such as measurement data or Da
  • a transaction of a data block can only include the checksum for this data.
  • the corresponding checksum can be implemented in different ways. This can e.g. B. a corresponding data block checksum of a data block (with the corresponding data) of another database or of the distributed database system, a transaction checksum of a data block with the corresponding data (of the distributed database system or another database) or a data checksum that is about the data was formed.
  • the corresponding transaction can contain a reference or an indication of a storage location (e.g. an address of a file server and details of where the corresponding data can be found on the file server; or an address of another distributed database which contains the data includes) to include.
  • the corresponding data could then, for example can also be provided in a further transaction of a further data block of the distributed database system (for example if the corresponding data and the associated checksums are contained in different data blocks).
  • this data is made available via another communication channel (eg via another database and / or a cryptographically secured communication channel).
  • an additional data record (for example a reference or an indication of a storage location) can also be stored in the corresponding transactions, which in particular indicates a storage location where the data can be called up. This is particularly advantageous in that the data size of the block chain or of the distributed database system is kept as small as possible.
  • security-protected or “security of data” can be understood to mean, for example, protection that is implemented in particular by a cryptographic method.
  • this can be achieved by using the distributed database system for the provision or transmission or sending of corresponding data / transactions.
  • This is preferably achieved by a combination of various (cryptic tographischen) checksums by usammen breathe this particular synergistically Z, for example, the safety and the cryptographic security for the data of trans actions to be improved.
  • security-protected in connection with the invention can also be understood to mean “cryptographically protected” and / or “manipulation-protected”, wherein “manipulation-protected” can also be referred to as “integrity-protected”.
  • a block chain platform can be understood as a block chain as a service (block chain as a service), as is suggested in particular by Microsoft or IBM.
  • a trustworthy node and / or a node can each store a node checksum (e.g. a digital signature) in a data block (e.g. in the data block they have validated and generated, which is then linked) in order to in particular to enable the creator of the data block to be identified and / or to enable the node to be identified.
  • This node checksum indicates which node, for example, has linked the corresponding data block to at least one other data block of the distributed database system.
  • a data structure or a transaction data record can be stand, which in particular comprises one of the transactions or several transactions.
  • “transaction” or “transactions” can also be understood to mean, for example, the data of a transaction of a data block of a block chain.
  • a transaction can in particular comprise a program code which, for example, implements a smart contract.
  • a transaction can also be understood to mean a tax transaction and / or a confirmation transaction.
  • a transaction can be, for example, a data structure that stores data (e.g. the control commands and / or contract data and / or other data such as video data, user data, measurement data, etc.).
  • Direct storage can mean, for example, that the corresponding data block (of the distributed database system) or the corresponding transaction of the distributed database system) comprises the respective data.
  • Indirect storage can be understood, for example, to mean that the corresponding data block or the corresponding transaction comprises a checksum and optionally an additional data record (e.g. a reference or an indication of a storage location) for corresponding data and thus the corresponding data are not stored directly in the data block (or the transaction) (ie instead only a checksum for this data).
  • these checksums can be validated, for example, as is explained, for example, under “inserting into the distributed database system”.
  • a “program code” (for example a smart contract) can be understood to mean, for example, a program command or a plurality of program commands which special are stored in one or more transactions.
  • the program code is particularly executable and is carried out, for example, by the distributed database system.
  • This can be implemented, for example, by means of an execution environment (for example a virtual machine), the execution environment or the program code preferably being Turing-complete.
  • the program code is preferably executed by the infrastructure of the distributed database system [4] [5].
  • a virtual machine is implemented through the infrastructure of the distributed database system.
  • a “smart contract” can be understood in connection with the invention as an executable program code [4] [5] (see in particular definition "program code”).
  • the smart contract is preferably stored in a transaction of a distributed database system (e.g. a block chain), for example in a data block of the distributed database system.
  • a distributed database system e.g. a block chain
  • the Smart contract can be understood in connection with the invention as an executable program code [4] [5] (see in particular definition "program code”).
  • the smart contract is preferably stored in a transaction of a distributed database system (e.g. a block chain), for example in a data block of the distributed database system.
  • a distributed database system e.g. a block chain
  • DLTS distributed ledger technology based system
  • an audit-proof database system e.g. B.
  • DAG Directed Acylic Graph
  • Cryptographic puzzle a cryptographic puzzle
  • hash graph a combination of the above implementation variants [6] [7].
  • Different consensus algorithms can also be implemented, for example. This can be, for example, a consensus procedure using a cryptographic puzzle, Gossip about Gossip, Virtual Voting or a combination of the above-mentioned procedures (e.g. Gossip about Gossip combined with Virtual Voting) [6] [7]. If, for example, a block chain is used, it can be implemented in particular by means of a Bitcoin-based implementation or an Ethereum-based implementation
  • a “distributed database system” can also be understood to mean, for example, a distributed database system, of which at least some of its nodes and / or devices and / or infrastructure are implemented by a cloud.
  • the corresponding components are in the form of nodes / devices Cloud (eg as a virtual node in a virtual machine) can be implemented using VM goods, Amazon Web Services or Microsoft Azure, for example.
  • Cloud eg as a virtual node in a virtual machine
  • VM goods e.g. a virtual node in a virtual machine
  • Azure Amazon Web Services
  • partial aspects of the implementation variants mentioned can also be combined with one another can be combined, e.g. by using a hash graph as a block chain, whereby the block chain itself can also be blockless, for example.
  • the distributed database system can be, for example, a public distributed database system (e.g. a public block chain) or a closed (or private) distributed database system (e.g. a private block chain).
  • a public distributed database system e.g. a public block chain
  • a closed (or private) distributed database system e.g. a private block chain
  • the distributed database system is, for example, a closed, distributed database system
  • new nodes and / or devices require, for example, a valid proof of authorization and / or valid authentication information and / or valid credentials and / or valid login information in order to use the distributed one Database system can join or be accepted by this.
  • a distributed database system can, for example, also be a distributed communication system for data exchange. This can be, for example, a network or a peer-2-peer network.
  • data block which can also be referred to as a "link” or “block”, depending on the context and implementation, in connection with the invention, for example, a data block of a distributed database system (e.g. a block chain or a peer to peer database), which is realized in particular as a data structure and preferably one or more of the transactions Transactions.
  • the database or the database system
  • DLTS DLT-based system
  • a data block can contain, for example, information on the size (data size in bytes) of the data block, a data block header, a transaction counter and one or more
  • the data block header can include a version, a chaining checksum, a data block checksum, a time stamp, a proof-of-work proof and a nonce (one-time value, random value or counter used for the proof-of-work proof) [1] [4] [5].
  • a data block can also be, for example, only a specific memory area or address area of the total data which are stored in the distributed database system. This allows, for example, blockless distributed database systems, such as. B. implement the IoT Chain (ITC), IOTA, and Byteball.
  • ITC IoT Chain
  • IOTA IOTA
  • Byteball Byteball
  • a data block can, for example, also comprise one or more transactions, in the simplest case, for example, a data block corresponding to a transaction.
  • nonce can be understood to mean, for example, a cryptographic nonce (abbreviation for: “used only once” [2] or “number used on- ce "[3]).
  • a nonce denotes individual numbers or a combination of letters, which is preferably used only once in the respective context (eg transaction, data transfer).
  • a “block chain node”, “node”, “node of a distributed database system” and the like can be understood in connection with the invention, for example, devices (for example field devices, mobile telephones), computers, smart phones, clients or subscribers which carry out operations (with) the distributed database system (e.g. a block chain) [1] [4] [5]
  • Such nodes can, for example, execute transactions of a distributed database system or its data blocks or new data blocks with new transactions insert or chain into the distributed database system using new data blocks, in particular this validation and / or chaining can be carried out by a trustworthy node (eg a mining node) or exclusively by trustworthy nodes
  • a node that has additional security measures e.g.
  • a trusted node can store a node checksum (e.g. a digital signature or a certificate) in the new data block.
  • a proof can be provided that indicates that the corresponding data block was inserted by a certain node or indicates its origin.
  • the devices e.g. the corresponding device
  • the devices can, for example, be field devices or devices in the Internet of Things, which in particular are also a node of the distributed database system.
  • nodes can also include at least one processor in order to, for. B. execute their computer-implemented functionality.
  • a “block chain oracle” and the like can be understood in connection with the invention, for example, to be nodes, devices or computers which, for example, have a security module which can be used, for example, by means of software protection mechanisms (for example cryptographic methods), mechanical protective devices (e.g. a lockable housing) or electrical protective devices (e.g. tamper protection or a protection system that includes the data of the safety module in the event of unauthorized use / treatment of the block chain oracle deletes)
  • Security module can include, for example, cryptographic keys that are necessary for the calculation of the checksums (e.g. transaction checksums or node checksums).
  • a “device” or a “device” in connection with the invention for example, a computer (system), a client, a smart phone, a device or a server, which are respectively arranged outside the block chain or no participant in the distributed database system (e.g. B. the block chain) (i.e. do not perform any operations with the distributed database system or only query them without carrying out transactions, inserting data blocks or calculating proof-of-work evidence).
  • a computer in particular can also be understood to mean a node of the distributed database system.
  • a device can in particular be understood as a node of the distributed database system or a device outside the block chain or the distributed database system.
  • a device outside the distributed database system can, for example, access the data (e.g. transactions or tax transactions) of the distributed database system and / or be controlled by nodes (e.g. by means of smart contracts and / or blockchain oracles). If, for example, a control or control of a device (for example a device designed as a node or a device outside the distributed database system) is implemented by a node, this can be done, for. B. by means of a smart contract, which is stored in particular in a transaction of the distributed database system.
  • nodes e.g. by means of smart contracts and / or blockchain oracles.
  • a method for controlling a data network with regard to the use of a distributed database comprises the following steps:
  • data with which the integrity of the data network is ensured can be stored at different, spatially separated locations (for example, also across DMZ).
  • the computing units which implement the distributed database typically compare these data with one another, so that it is ensured that this data is the same at the different spatially separated locations. If certain data in the distributed database were manipulated (e.g. when one of these blockchains was manipulated), it would be recognized that the other data in the distributed database (e.g. the other blockchains) contained different information, whereupon the manipulated data (e.g. the manipulated blockchain) compared with the other data (e.g. the other blockchain) which will reverse the manipulation.
  • control of the operation of the data network can include assigning computing tasks in connection with the storage of data in the distributed database to those computing units for which free capacities have been recorded.
  • These arithmetic tasks can include tasks for generating the data stored in the distributed database (e.g. creating a blockchain).
  • Controlling the operation of the data network can also include assigning computing tasks for starting up the distributed database to those computing units for which free capacities have been recorded.
  • the operation of the data network is controlled as a function of a predefined correlation between security of data stored in the distributed database and computing resources for storing the data in the distributed database.
  • the security or integrity of the data stored in the distributed database often depends in particular on how this data is or will be protected against manipulation. Such protection can be achieved, for example, by appropriate encryption or by distributing copies of the stored data as numerous as possible. half of the database or data network.
  • the computing resources required to provide this security can be determined. There is often a tendency that the greater the security of the data stored in the distributed database, the more computing resources are required to store the data in the distributed database, this relationship (between the security of the data and the required computing resources) corresponds to the given correlation.
  • the security of the data can be changed, for example, by changing the configuration parameters of one or more security features of the distributed database when the data is stored. These configuration parameters determine, in particular, how the data stored in the distributed database is protected against manipulation.
  • the one security feature or the plurality of security features can include a chaining checksum of sequentially stored data.
  • the length and / or the algorithm for forming the chaining checksum could be provided as a security feature.
  • each block of the block chain typically contains a cryptographically secure hash value of the preceding block, which is to be regarded as the chaining checksum in the sense of the present invention.
  • a chaining checksum links different data blocks which are stored in the distributed database in such a way that it is (almost) impossible to change only one of these data blocks without this being noticeable on the basis of the chaining checksum.
  • the operation of the data network can also be controlled depending on a comparison between the security indexed data based on the predetermined correlation with the detected capacity of computing resources and a predetermined target security or minimum security.
  • the minimum security can, for example, determine how much effort is required to save a certain amount of data (e.g. 1 MB) of raw data (stored in the data network) in such a way that unauthorized manipulation of this raw data is at least recognized.
  • the minimum security thus defines, for example, in particular the way in which this raw data is protected against unauthorized manipulation (e.g. encryption of the raw data or formation of a checksum on the raw data).
  • the definition of minimum security can also include how many copies of the blockchain exist and how these copies of the blockchain are to be distributed in the distributed database.
  • the method according to the invention can further comprise detecting a network topology (of the computing units) of the data network, so that the operation of the data network can be controlled depending on this network topology.
  • the network topology can describe an arrangement of different computing units to one another in the data network, i.e. a communication link with or without intermediate routers, etc.
  • Local dislocations are understood to mean which locations (such as factories, business premises, outposts, etc.) are part of the data network, and which fire protection zones, switch boxes and power supply sections etc. exist in a location with regard to the data network.
  • controlling the operation of the data network also includes adapting the network topology.
  • the adaptation of the network topology can include adding connections between computing units of the data network, but also removing connections between such computing units.
  • controlling the operation of the data network can include adding and removing computing units from the data network.
  • the predetermined minimum safety, process V according to the invention may or Suggest how many computing units are to be added to the data network (for example, as a blockchain manager) at certain points, in order to be able to achieve the specified minimum security, particularly in statistical terms.
  • control of the operation of the data network can include that user instructions are output via a user interface, these user instructions relating to physical adaptations of the data network.
  • communication with users of the data network can be carried out in accordance with the invention, in order thereby to achieve in particular those necessary for achieving minimum security. make adjustments (e.g. adding computing units and connections between computing units).
  • the user can specify which minimum security (level of security) he would like to achieve using the distributed database.
  • the method according to the invention can then tell the user how many additional computing units or computing units and / or network-side investments (eg additional data connections) are to be added at which points in the data network , so that the desired minimum security can be achieved with the expanded database.
  • the method according to the invention can be used when planning a new data network, for expanding an existing data network with the distributed database and for expanding an existing data network with an already existing database.
  • data is stored in the distributed database which indicate the operating parameters of the data network.
  • the distributed database By storing data in the distributed database (for example in the blockchain) which are derived from operating parameters of the data network, the distributed database can be recognized whether these operating parameters have been changed without permission.
  • the data stored in the distributed database which index the operating parameters of the data network, include, for example, versioning information of software or data packets which are stored in the data network.
  • distributed database e.g. blockchain
  • information stored in the distributed database can also be linked to data to be transmitted in the data network, in order to ensure the integrity of this data during processing or transmission to an external memory (e.g. cloud).
  • an external memory e.g. cloud
  • Multifunctional platforms with several cores, generally CPUs and / or GPUs, can be used as computing units for the database.
  • a so-called blockchain computing unit i.e. a computing unit for managing a blockchain
  • the data traffic between the cores of the same multifunctional platform advantageously results in a significantly lower network load compared to data traffic between computing units distributed in the network.
  • certain computing units of the data network which are used for the distributed database to manage only a part of the blockchain, where this part comprises at least the last block of the blockchain.
  • a hierarchy can be moved into the blockchain organization.
  • blockchain administrators exist in a first hierarchy level, who only manage the at least necessary worm process or the previously described part of the blockchain that is needed to create a new block for the blockchain.
  • Blockchain administrators which each contain the entire blockchain, exist in a second hierarchy level above the first hierarchy level.
  • the blockchain administrators of the first hierarchy level can reduce the network load and also the storage requirements for storing the blockchain without having to compromise on the security of the data network.
  • a procedure for determining a hash value which characterizes the specific block and which is stored in a further block of the blockchain which directly follows the specific block can be changed depending on a specific block of the blockchain.
  • the possibility of changing the procedure for determining or generating the hash value for the blockchain can advantageously further increase the security of the data network achieved by the distributed database.
  • the data network according to the invention can be an industrial data network, which can be used, for example, for an automobile company, a track system, a power plant, a smart grid or a power transmission system. Maintenance data, cloud data or health data can be stored with a data network according to the invention.
  • a distributed database for example a blockchain
  • corresponding software packages can be automatically played on the computing units of the computing units and the distributed database thereby Be operated. This can be initiated, for example, by a corresponding push of a button or by a corresponding slider or hook in a software menu by a corresponding user.
  • the distributed database can be automatically expanded by additional blockchain administrators (i.e. new computing units in the data network), thus increasing security. Such an expansion can be done on the one hand by introducing extra computing units for the blockchain or by additional systems in the data network, which can also take on some of the blockchain tasks.
  • the present invention discloses an electronically readable data carrier, for example a DVD, a magnetic tape, a hard disk or a USB stick, on which electronically readable control information, in particular software (see above), is stored. If this control information (software) is read from the data carrier and stored in a control device or arithmetic unit which can be connected to a data network, all of the embodiments of the method described above can be carried out.
  • the security implemented by a blockchain can, for example, be integrated step by step into an existing data network with a central software.
  • the invention can be used both in the planning phase and in an existing data network without blockchain and in an existing data network with blockchain.
  • the quality or integrity of the data network can also be improved or adapted step by step to certain circumstances. For example, when the data network is enlarged, a notice can be automatically generated that additional security should be built in regarding the blockchain.
  • a distributed database for example a blockchain
  • a distributed database can be implemented cost-effectively according to the invention.
  • FIG. 1 A blockchain according to the invention is shown schematically in FIG. 1.
  • FIG. 2 shows a device according to the invention which is connected to a data network.
  • FIG. 3 shows the data network shown in FIG. 2 with a distributed database.
  • a blockchain 300 according to the invention is shown schematically in FIG. 1.
  • the blockchain 300 comprises several data blocks 301-303, which are linked in the form of a chain or sequence of data blocks 301-303.
  • Each data block 301-303 has a chaining checksum 311-313, which for example represents a hash value.
  • the checksum 311-313 is dependent on the previous data block within the
  • the checksum 312 of the data block 302 is formed as a function of the data block 301, which is represented by the corresponding arrow in FIG. 1.
  • the checksum 311 or 312 of the data block 301 or 302 can, for example, be a hash value which is calculated on the basis of the data stored in the respective previous data block 302 or 303.
  • an (unauthorized) modification of the data block 302 or 303 can be detected by comparing the data block 302 or 303 with the checksum 311 or 312.
  • FIG. 2 shows a data network 6 to which a device 4 according to the invention is connected.
  • the data network comprises a plurality of computing units 3, each of which at least one CPU 1 usually also includes a memory unit or a memory 2.
  • the computing units 3 are connected to one another via data lines 7.
  • the device 4 according to the invention is also a computing unit which comprises a CPU 1 and a memory unit or a memory 2. summarizes.
  • the device 4 according to the invention is connected via a data line 7 to the data network 6 or is part of the data network 6.
  • a method according to the invention for controlling the data network with regard to the use of a distributed database (for example a blockchain 300) runs on the device 4 according to the invention.
  • the method according to the invention detects a capacity of computing resources of the computing units 3 of the data network 6. Depending on this capacity of computing resources
  • the device 4 controls the operation of the data network 6 with regard to the use of the distributed database 300.
  • Fig. 3 these three computing units 3 are summarized by a dashed line 5 ge, with the reference character 5 chen the processing units 3 used for the distributed database (in particular for realizing a blockchain 300) are identified.
  • the device 4 uses these three computing units 3 to build up the distributed database 300, in which version information of the software and data packets stored in the data network 6 are then stored in the form of a blockchain.
  • the distributed database or blockchain 300 constructed in accordance with the invention thereby ensures data integrity of the data network 6.

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • General Health & Medical Sciences (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Bioethics (AREA)
  • Health & Medical Sciences (AREA)
  • Databases & Information Systems (AREA)
  • Automation & Control Theory (AREA)
  • Environmental & Geological Engineering (AREA)
  • Information Retrieval, Db Structures And Fs Structures Therefor (AREA)

Abstract

L'invention concerne une commande d'un réseau de données (6) en vue de l'utilisation d'une base de données distribuée (300). Selon l'invention, une capacité de ressources de calcul d'une pluralité d'unités de calcul (3) du réseau de données (6) est détectée. Le fonctionnement du réseau de données (6) en vue de l'utilisation de la base de données distribuée (300) est commandé en fonction de la capacité des ressources de calcul.
EP19745998.5A 2018-07-25 2019-07-09 Commande d'un réseau de données en vue de l'utilisation d'une base de données distribuée Withdrawn EP3797491A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
EP18185507.3A EP3599740A1 (fr) 2018-07-25 2018-07-25 Commande d'un réseau de données concernant une utilisation d'une banque de données distribuée
PCT/EP2019/068409 WO2020020634A1 (fr) 2018-07-25 2019-07-09 Commande d'un réseau de données en vue de l'utilisation d'une base de données distribuée

Publications (1)

Publication Number Publication Date
EP3797491A1 true EP3797491A1 (fr) 2021-03-31

Family

ID=63442371

Family Applications (2)

Application Number Title Priority Date Filing Date
EP18185507.3A Withdrawn EP3599740A1 (fr) 2018-07-25 2018-07-25 Commande d'un réseau de données concernant une utilisation d'une banque de données distribuée
EP19745998.5A Withdrawn EP3797491A1 (fr) 2018-07-25 2019-07-09 Commande d'un réseau de données en vue de l'utilisation d'une base de données distribuée

Family Applications Before (1)

Application Number Title Priority Date Filing Date
EP18185507.3A Withdrawn EP3599740A1 (fr) 2018-07-25 2018-07-25 Commande d'un réseau de données concernant une utilisation d'une banque de données distribuée

Country Status (4)

Country Link
US (1) US20220114276A1 (fr)
EP (2) EP3599740A1 (fr)
CN (1) CN112425121A (fr)
WO (1) WO2020020634A1 (fr)

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP3627407A1 (fr) * 2018-09-18 2020-03-25 Siemens Aktiengesellschaft Base de données distribuée
US11606426B1 (en) * 2019-10-23 2023-03-14 Architecture Technology Corporation Database access gateway through distributed network nodes
CN111475575B (zh) * 2020-04-09 2021-08-10 腾讯科技（深圳）有限公司 基于区块链的数据同步方法、装置及计算机可读存储介质
CN117056297A (zh) * 2023-06-05 2023-11-14 贵州白山云科技股份有限公司 多版本文件的去中心化存储系统、方法、设备及存储介质
CN119854040B (zh) * 2025-03-19 2025-06-06 深圳市悦道科技有限公司 一种云数据存储的方法、设备和计算机可读存储介质

Family Cites Families (30)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080244607A1 (en) * 2007-03-27 2008-10-02 Vladislav Rysin Economic allocation and management of resources via a virtual resource market
DE102007038763A1 (de) 2007-08-16 2009-02-19 Siemens Ag Verfahren und Vorrichtung zur Sicherung eines Programms gegen eine Kontrollflussmanipulation und gegen einen fehlerhaften Programmablauf
DE102007040343B4 (de) 2007-08-27 2010-12-30 Siemens Ag Vorrichtung und Verfahren zum Erzeugen einer Zufallsbitfolge
DE102008018678B4 (de) 2008-04-14 2011-02-03 Siemens Aktiengesellschaft Vorrichtung und Verfahren zum Erzeugen einer Zufallsbitfolge
DE102008061483A1 (de) 2008-12-10 2010-06-24 Siemens Aktiengesellschaft Verfahren und Vorrichtung zum Verarbeiten von Daten
DE102011007572A1 (de) 2011-04-18 2012-10-18 Siemens Aktiengesellschaft Verfahren zur Überwachung eines Tamperschutzes sowie Überwachungssystem für ein Feldgerät mit Tamperschutz
DE102011087804A1 (de) 2011-12-06 2013-06-06 Siemens Aktiengesellschaft Vorrichtung und Verfahren zum Entschlüsseln von Daten
DE102011088502B3 (de) 2011-12-14 2013-05-08 Siemens Aktiengesellschaft Verfahren und Vorrichtung zur Absicherung von Blockchiffren gegen Template-Attacken
DE102012217743B4 (de) 2012-09-28 2018-10-31 Siemens Ag Überprüfung einer Integrität von Eigenschaftsdaten eines Gerätes durch ein Prüfgerät
DE102012220990B3 (de) 2012-11-16 2014-01-23 Siemens Aktiengesellschaft Verfahren und Anordnung zur sicheren Kommunikation zwischen Netzwerkeinrichtungen in einem Kommunikationsnetzwerk
DE102013200017A1 (de) 2013-01-02 2014-07-03 Siemens Aktiengesellschaft RFID-Tag und Verfahren zum Betreiben eines RFID-Tags
DE102013208152A1 (de) 2013-05-03 2014-11-20 Siemens Aktiengesellschaft Vorrichtung und Verfahren zum Erzeugen von Zufallsbits
DE102013212525A1 (de) 2013-06-27 2014-12-31 Siemens Aktiengesellschaft Datenspeichervorrichtung zum geschützten Datenaustausch zwischen verschiedenen Sicherheitszonen
DE102013222218A1 (de) 2013-10-31 2014-05-22 Siemens Aktiengesellschaft Konstruieren einer Schaltung geeignet zur Erzeugung von Zufallsbits und Schaltung zur Erzeugung von Zufallsbits
DE102013227087A1 (de) 2013-12-23 2015-06-25 Siemens Aktiengesellschaft Gesichertes Bereitstellen eines Schlüssels
DE102014206992A1 (de) 2014-04-11 2015-10-15 Siemens Aktiengesellschaft Zufallszahlengenerator und Verfahren zum Erzeugen von Zufallszahlen
DE102014208210A1 (de) 2014-04-30 2015-11-19 Siemens Aktiengesellschaft Ableiten eines gerätespezifischen Wertes
DE102014212488B4 (de) 2014-06-27 2016-02-18 Siemens Aktiengesellschaft Gesichertes Bereitstellen eines Replika-Pseudo-Zufallsrauschcodes an eine Empfängereinheit
DE102014212467B3 (de) 2014-06-27 2015-10-15 Siemens Aktiengesellschaft Bereitstellen eines gesicherten Replika-Pseudo-Zufallsrauschsignals
CN106251144A (zh) * 2015-06-05 2016-12-21 地气股份有限公司 电子货币管理方法及电子货币节点装置
DE102015214267A1 (de) 2015-07-28 2017-02-02 Siemens Aktiengesellschaft Verfahren und System zum Erzeugen eines sicheren Kommunikationskanals für Endgeräte
US10853750B2 (en) * 2015-07-31 2020-12-01 British Telecommunications Public Limited Company Controlled resource provisioning in distributed computing environments
EP3320406B1 (fr) 2015-09-21 2019-08-14 Siemens Aktiengesellschaft Validation d'une étape de traitement d'un objet à traiter
US10255108B2 (en) * 2016-01-26 2019-04-09 International Business Machines Corporation Parallel execution of blockchain transactions
KR101862348B1 (ko) 2016-02-09 2018-05-29 지멘스 악티엔게젤샤프트 프로그램 명령들의 안전한 실행을 위한 방법 및 실행 환경
DE102016219848A1 (de) 2016-10-12 2018-04-12 Siemens Aktiengesellschaft Verfahren und Vorrichtung zum Bereitstellen einer gesicherten Kommunikation innerhalb eines echtzeitfähigen Kommunikationsnetzwerkes
DE102016219926A1 (de) 2016-10-13 2018-04-19 Siemens Aktiengesellschaft Verfahren, Sender und Empfänger zum Authentisieren und zum Integritätsschutz von Nachrichteninhalten
US10762564B2 (en) * 2016-11-10 2020-09-01 International Business Machines Corporation Autonomous peer-to-peer energy networks operating on a blockchain
US20170285720A1 (en) * 2017-05-07 2017-10-05 Jigar Jayesh Shah Method and system for mitigating transmission congestion via distributed computing and blockchain technology
CN107832139A (zh) * 2017-09-26 2018-03-23 上海点融信息科技有限责任公司 用于管理区块链节点的计算资源的方法、设备和系统

Also Published As

Publication number Publication date
EP3599740A1 (fr) 2020-01-29
CN112425121A (zh) 2021-02-26
WO2020020634A1 (fr) 2020-01-30
US20220114276A1 (en) 2022-04-14

Similar Documents

Publication Publication Date Title
EP3652656B1 (fr) Dispositifs destinés à fournir une quantité d'enregistrements unitaires de transactions, protégés de manière cryptographique et filtrés ainsi que triés, d'un maillon d'une chaîne de blocs
EP3673623B1 (fr) Procédé et système de contrôle pour le contrôle et/ou la surveillance d'appareils
EP3797491A1 (fr) Commande d'un réseau de données en vue de l'utilisation d'une base de données distribuée
EP3669498B1 (fr) Procédé et système de contrôle pour le contrôle et/ou la surveillance d'appareils
EP3669285B1 (fr) Procédé et système de commande et/ou de surveillance de dispositifs
EP3921996B1 (fr) Détection d'intrusion dans des systèmes informatiques
EP3637345A1 (fr) Mise en relation d'identités dans une base de données distribuée
WO2019063509A1 (fr) Procédé et système de base de données distribuée pour l'exécution informatique d'un code de programme
EP3714575B1 (fr) Procédé et système de contrôle pour le contrôle et/ou la surveillance d'appareils
EP3763089B1 (fr) Procédé et système de contrôle pour le contrôle et/ou la surveillance d'appareils
WO2020043581A1 (fr) Dispositif et procédé de formation de bloc, dispositif nœud et procédé de confirmation de bloc
EP3877935A1 (fr) Procédé pour faire fonctionner un système de base de données distribué, système de base de données distribué et système d'automatisation industrielle
EP3718263B1 (fr) Procédé et système de contrôle pour le contrôle et/ou la surveillance d'appareils
EP3413254A1 (fr) Procédé et dispositif destinés à fournir un mot de passe à usage unique
WO2018177664A1 (fr) Identificateurs pour sécuriser l'intégrité de copies codées de facon numérique
WO2020043508A1 (fr) Procédé pour faire fonctionner un système de base de données distribué, système de base de données distribué et système de stockage automatique
EP3609148A1 (fr) Méthode et noeuds de réseau destinés au traitement des données de mesure
WO2022022997A1 (fr) Communication basée sur des canaux dans un réseau ido
WO2020043588A1 (fr) Dispositif et procédé pour déterminer une version de consensus d'un livre de transaction et dispositif et procédé pour surveiller un système de base de données réparties
WO2020043430A1 (fr) Dispositif et procédé de fourniture d'une transaction oracle dans un système de base de données réparties
WO2020193044A1 (fr) Procédé et système de commande pour la commande d'une exécution de transactions
EP3617976A1 (fr) Procédé de fonctionnement d'un système de base de données distribuée, système de base de données distribuée et système d'automatisation industrielle
DE102020204635A1 (de) Verfahren und Vorrichtung zur kontrollierten Bereitstellung von Daten und kontrollierten Auswertung der bereitgestellten Daten durch eine externe Anordnung
EP3787251A1 (fr) Procédé, dispositif de communication et application réseau destinés à la transmission protégée d'un ensemble de données
EP3817315A1 (fr) Dispositif de vérification, dispositif et procédé de validation de transactions

Legal Events

Date Code Title Description
STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: UNKNOWN

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE INTERNATIONAL PUBLICATION HAS BEEN MADE

PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: REQUEST FOR EXAMINATION WAS MADE

17P Request for examination filed

Effective date: 20201221

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

AX Request for extension of the european patent

Extension state: BA ME

DAV Request for validation of the european patent (deleted)
DAX Request for extension of the european patent (deleted)
STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: EXAMINATION IS IN PROGRESS

17Q First examination report despatched

Effective date: 20220519

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN

18D Application deemed to be withdrawn

Effective date: 20220930