Patent ID: 9252956
Filing Date: 2016-02-02
CPC Classification: H04L,H04W

Claim Text:
1. A method for recognizing manipulation during transmission of control data from a first controller to a second controller via a transmission network, the first controller including a processor and memory and being connected to a first control network including a first gateway, the second control network including a second gateway, the first and second control networks comprising production cells in a production plant, the method comprising the steps of: (a) generating, by an integrity check generator arranged in the first gateway, integrity check information data on a transmitter side for the control data transmitted by the first controller connected to the first control network, the first controller transmitting the control data; (b) calculating a cryptographic checksum for the integrity check information data generated on the transmitter side by the integrity check generator using a cryptographic key; (c) transmitting, via the transmission network, the integrity check information data generated on the transmitter side and the corresponding cryptographic checksum calculated by the integrity check generator to an integrity check verifier arranged in the second gateway, the integrity check verifier verifying the cryptographic checksum on a receiver side using the cryptographic key; (d) generating, by the integrity check verifier, integrity check information data on the receiver side for the control data received by the second controller connected to the second control network; and (e) comparing, by the integrity check verifier, the integrity check information data generated on the receiver side by the integrity check verifier and the integrity check information data generated on the transmitter side and received together with the cryptographic checksum which is verified by the integrity check verifier to detect manipulation of the transmitted control data.