公开(公告)号：US20190130113A1

公开(公告)日：2019-05-02

申请号：US16134342

申请日：2018-09-18

Applicant: ABB Schweiz AG

Inventor： Sebastian Obermeier ,  Roman Schlegel ,  Johannes Schneider ,  Thomas Locher ,  Matus Harvan

IPC: G06F21/57 ,  G06F21/55 ,  G05B19/418 ,  G05B15/02

Abstract: The present invention generally relates to a context-aware security self-assessment method or module that determines the context in which the device is used and based on this, assesses the devices security settings. The context may refer to the system environment, the applications the device is used for, and/or the current life-cycle stage of the device, without being limited to said contexts. The method of the present invention preferably prioritizes and rates the security relevant findings and presents them in combination with mitigation options through a web interface, a configuration tool, or through notifications in the control system.

公开(公告)号：US20190097787A1

公开(公告)日：2019-03-28

申请号：US16189126

申请日：2018-11-13

Applicant: ABB Schweiz AG

Inventor： Johannes Schneider ,  Matus Harvan ,  Sebastian Obermeier ,  Thomas Locher ,  Yvonne-Anne Pignolet

IPC: H04L9/00

CPC classification number: H04L9/008 ,  H04L2209/46 ,  H04L2209/76

Abstract: The invention relates to a method for aggregation of a performance indicator of a device comprising the steps of: concatenating a respective first data item to a plurality of second data items in the device; encrypting the plurality of concatenated second data items relevant for computing the performance indicator using a first encryption key in the device, wherein the first encryption key is based on an additive homomorphic encryption scheme; sending the encrypted concatenated second data items to a computation cluster; computing the performance indicator on the computation cluster using the encrypted concatenated second data items and computing an aggregate value regarding the performance indicator by summing up the encrypted concatenated second data items; sending the aggregate value to a server of a service provider of the device; decrypting the aggregate value using a second encryption key on the server of the service provider; and verifying the decrypted result by checking whether the decrypted sum computed by summing up the encrypted concatenated second data items comprises a predetermined value. The present invention also relates to a corresponding system and corresponding computer program product comprising one or more computer readable media having computer executable instructions for performing the steps of the method.