Wireless dongle and method for wirelessly transmitting data from a computer to at least one field device

• US 10,271,207 B2
• Filed: 12/15/2016
• Issued: 04/23/2019
• Est. Priority Date: 12/15/2015
• Status: Active Grant

• Current Assignee: Endress+Hauser Conducta Gesellschaft FUER Mess- und Regeltechnik mbH+Company KG
• Original Assignee: Endress+Hauser Conducta Gesellschaft FUER Mess- und Regeltechnik mbH+Company KG
• Inventors: Haase, Bjorn
• Primary Examiner(s): Shehni, Ghazal B
• Application Number:
  US15/379,680
• Publication Number:
  US 20170171746A1
• Time in Patent Office: 859 Days
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 7/588 Random number generators, i.e. based on natural stochastic processes
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 9/10 with particular housing, physical features or manual controls
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

The present disclosure relates to a wireless dongle for the wireless transmission of data from a computer to at least one field device of a process automation system. The dongle includes a connection interface for connecting the dongle to a computer, a wireless interface for transmitting the data from the dongle to a field device, a memory, an arithmetic unit configured to generate and test signatures and release codes, as well as to perform encryption, and a housing, wherein the wireless interface, the memory, the arithmetic unit, and the connection interface are arranged in the housing, wherein only the part of the connection interface relevant for the connection to the computer is omitted from the housing. The present disclosure further relates to a method for wirelessly transmitting data from a computer to a field device.

Claims

1. A communication device for the wireless transmission of data from a computer, comprising:

a connection interface for connecting the communication device to a computer, the connection interface having a plug;

a wireless interface configured to transmit data from the communication device to a field device;

a memory on which at least one key can be saved;

an arithmetic unit configured to generate and to test signatures and release codes and to perform at least one asymmetrical encryption; and

a housing,

wherein the wireless interface, the memory, the arithmetic unit, and the connection interface are arranged in the housing, and only the plug is external to the housing,

wherein the arithmetic unit is further configured to

establish a bi-directional wireless connection between the communication device and the field device;

transfer a key and a password to the field device for a two-factor authentication of the communication device in the field device;

receive a data block from the field device when the two-factor authentication is successful; and

transmit data from the communication device to the field device, wherein the transfer of the key and the password, the reception of the data block, and the transmission of the data are protected from eavesdropping by an asymmetrical encryption method.

2. The communication device according to claim 1, wherein the wireless interface implements a low-energy near-field communication protocol.

3. The communication device according to claim 2, wherein the low-energy near-field communication protocol is a Bluetooth protocol.

4. The communication device according to claim 3, wherein the Bluetooth protocol is sufficient for a low-energy protocol stack.

5. The communication device according to claim 1, wherein the communication device is cast.

6. The communication device according to claim 1, further comprising protective measures to recognize a manipulation or a removal of the housing.

7. The communication device according to claim 1, further comprising a hardware random number generator.

8. The communication device according to claim 1, wherein the connection interface is a USB interface.

9. The communication device according to claim 1, wherein the communication device is a wireless dongle.

10. A method for the wireless transmission of data from a computer to a field device of a process automation system, comprising:

providing a communication device, including;

a connection interface for connecting the communication device to the computer, the connection interface having a plug;

a wireless interface configured to transmit data from the communication device to the field device;

a memory on which one key can be saved;

an arithmetic unit configured to generate and to test signatures and release codes and to perform at least one asymmetrical encryption; and

a housing, wherein the wireless interface, the memory, the arithmetic unit, and the connection interface are arranged in the housing, and only the plug is external to the housing;

connecting the communication device to the computer;

establishing a bi-directional wireless connection between the communication device and the field device;

authenticating the communication device in the field device using a key, wherein the key is saved on the communication device, wherein the authentication of the communication device in the field device includes a two-factor authentication using the key and a password;

transmitting a data block from the field device to the communication device when authentication is successful; and

transmitting data from the communication device to the field device, wherein the authentication of the communication device, the transmission of the data block, and the transmission of the data are protected from eavesdropping by an asymmetrical encryption method.

11. The method according to claim 10, wherein the asymmetrical encryption method includes a method based upon algorithm class RSA, a digital signal algorithm based upon prime elements, and/or a digital signal method based upon elliptical curves.

12. The method according to claim 10, further comprising

executing protective measures against side channel attacks, especially run-time smoothing by constantly running code such as inserting redundancies, so as to execute machine commands independently of data and avoid conditional jumps, randomization of power consumption, physical protective measures against electromagnetic radiation, and/or insertion of noise such as code obfuscation, grid obfuscation, and/or signal noise.

13. The method according to claim 10, wherein the asymmetrical encryption method uses hybrid encryption.