A measurement infrastructure, in particular intelligent measurement infrastructure, for collecting measurement data generated by a plurality of terminals having at least one data collection apparatus which is configured as a data concentrator, and at least one head-end system, wherein the measurement infrastructure comprises the plurality of terminals, the at least one data collection apparatus and the at least one head-end system, wherein the terminals, the at least one data collection apparatus and the at least one head-end system are designed to communicate with each other by means of operation messages (200A, 200A', 200B, 200B', 203A, 203A', 203B, 203B') via the at least one data collection apparatus and the at least one data collection apparatus comprises a data management module which, in a normal mode, interprets operation messages (200A, 200A', 200B, 200B', 203A, 203A', 203B, 203B') transmitted by the head-end system and/or terminals, wherein the data management module is designed to leave security messages (300, 300') transmitted from the head-end system and/or terminals in an uninterpreted state in a security mode, the security messages (300, 300') comprise a securing message portion (301, 301') which is protected by means of a security encryption layer (302, 302'), which is produced by means of a corresponding security key which is present in the head-end system and terminal, wherein the data collection apparatus does not have the security key for decrypting the security encryption layer (302, 302'), wherein the security messages (300, 300') are embedded in the operation messages (200A, 200A', 200B, 200B', 203A, 203A', 203B, 203B') and, an operating encryption layer (202, 205) of the operation message (200A, 200A', 200B, 200B', 203A, 203A', 203B, 203B') surrounds the security encryption layer (302, 302') of the security message (300, 300'), wherein the data management module is designed, in normal mode, to decrypt an operating encryption layer of the operating messages by means of an operating key which is stored in the data collection apparatus, wherein the data collection apparatus comprises an operating storage region for storing the operation messages (200A, 200A', 200B, 200B', 203A, 203A', 203B, 203B'), characterised in that the data collection apparatus comprises a security storage region, which is provided with more complex security measures than the operating storage region for protection from unauthorised access, wherein the security storage region is not designed to store non-encrypted security messages, and wherein the data collection apparatus is configured to temporarily store or buffer the encrypted security messages only in the operating storage region, wherein storage of the security messages does not take place, and wherein a storage space of the security storage region is sized in such a manner that the security messages cannot be stored in the storage space. wherein the measurement infrastructure comprises the plurality of terminals, the at least one data collection apparatus and the at least one head-end system, wherein the terminals, the at least one data collection apparatus and the at least one head-end system are designed to communicate with each other by means of operation messages (200A, 200A', 200B, 200B', 203A, 203A', 203B, 203B') via the at least one data collection apparatus and the at least one data collection apparatus comprises a data management module which, in a normal mode, interprets operation messages (200A, 200A', 200B, 200B', 203A, 203A', 203B, 203B') transmitted by the head-end system and/or terminals, wherein the data management module is designed to leave security messages (300, 300') transmitted from the head-end system and/or terminals in an uninterpreted state in a security mode, the security messages (300, 300') comprise a securing message portion (301, 301') which is protected by means of a security encryption layer (302, 302'), which is produced by means of a corresponding security key which is present in the head-end system and terminal, wherein the data collection apparatus does not have the security key for decrypting the security encryption layer (302, 302'), wherein the security messages (300, 300') are embedded in the operation messages (200A, 200A', 200B, 200B', 203A, 203A', 203B, 203B') and, an operating encryption layer (202, 205) of the operation message (200A, 200A', 200B, 200B', 203A, 203A', 203B, 203B') surrounds the security encryption layer (302, 302') of the security message (300, 300'), wherein the data management module is designed, in normal mode, to decrypt an operating encryption layer of the operating messages by means of an operating key which is stored in the data collection apparatus, wherein the data collection apparatus comprises an operating storage region for storing the operation messages (200A, 200A', 200B, 200B', 203A, 203A', 203B, 203B'), characterised in that the data collection apparatus comprises a security storage region, which is provided with more complex security measures than the operating storage region for protection from unauthorised access, wherein the security storage region is not designed to store non-encrypted security messages, and wherein the data collection apparatus is configured to temporarily store or buffer the encrypted security messages only in the operating storage region, wherein storage of the security messages does not take place, and wherein a storage space of the security storage region is sized in such a manner that the security messages cannot be stored in the storage space.