Method for the authentication of at least one first unit on at least one second unit

US9710984B2 · kind B2 · utility

Assignee

• Endress+Hauser Conducta GmbH+Co. KG · DE

Inventors

• Tilman Benkert · Stuttgart, DE
• Björn Haase · Stuttgart, DE
• Gunter Jahl · Gerlingen, DE
• Stefan Robl · Hünxe, DE

Key dates

• Filing date: Sep 2, 2015
• Grant date: Jul 18, 2017
• Expiry date: Sep 18, 2035

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04W12/72
• WIPO field: Digital communication
• WIPO sector: Electrical engineering

Abstract

A method for unilaterally or mutually authenticating at least one first unit, especially a mobile device, on at least one second unit, especially a field device, within a plant, especially in the area of process automation technology, with a communication line, preferably a wireless communication line, in place between the first unit and the second unit, comprising the steps of: establishing a security policy, with the security policy including rules for granting access of the first unit on the basis of at least one unlock key, and information to check the unlock key for validity; providing the security policy to the second unit; generating an unlock key for the first unit and providing the unlock key at the first unit; transfer of the unlock key from the first unit to the second unit and verification of the unlock key by the second unit using the security policy and, if applicable, granting access. Furthermore, a computer program product executes the method and a machine-readable data carrier includes the computer program product.