DE102019203874A1 - Methods and apparatus for load allocation and monitoring for a resource that is critical to the security of supply in a network - Google Patents

Abstract

The invention relates to a device and method for load allocation and monitoring for a resource to be allocated in a network (100), the resource to be allocated being a critical resource in terms of security of supply for a population group and / or a system, the network (100) is subdivided into network units (101) and each network unit (101) has a network unit controller (211), the method comprising: provision (10) of network unit control methods (11), network unit parameter data sets (12) and sub-network monitoring methods (13) in at least one blockchain (300). Assigning (20) a sub-network monitoring unit (111) to part of the network (110). Transmitting (30, 40) a network unit control method (11) and a network unit parameter data set (12) to each network unit controller (211) of the part of the network (110). The transmission (30, 40) of the network unit control method (11) and the network unit parameter data sets (12) is cryptographically secured against reading out and manipulation of the network unit control method (11) and the network unit parameter data sets (12) that the corresponding readout and manipulation is largely excluded and takes place in such a way that proper functioning of each network unit controller (211) of the part of the network (100) is guaranteed. Monitoring (50) the proper functioning of each network unit controller (211) of the part of the network (110) by the sub-network monitoring unit (111) by means of a corresponding sub-network monitoring method (13).

Description

The invention relates to a method and devices for load allocation and monitoring for a resource that is critical to the security of supply in a network to be allocated.

When designing automation systems for supply networks, it is important to consider the load capacity. If a system is resilient, it would be more reliable and available. In the event of an attack or failure, the system would either mitigate the attack or provide little utility downtime.

In a conventional network distribution system, there is usually a central control center that includes units such as supervisory control and data acquisition (SCADA), a distribution management system (DMS) and an energy management system (EMS). Real-time data is collected from remote devices, i.e. from Remote Terminal Units (RTUs), and stored in SCADA. Then the data is processed by monitoring and control applications such as condition estimation, Volt VAR control or congestion management, which are hosted on DMS or EMS. These functionalities enable reliable and efficient network operation so that the system can withstand disruptions or inconveniences. Due to its centralized nature, however, an attack would lead to a system failure and thus to a loss of operational security. The cyber attack on the Ukrainian power grid in 2015 shows that a robust network architecture is urgently required.

It would therefore be desirable to provide a technical solution which eliminates or at least reduces at least one of the disadvantages from the prior art with regard to failure and / or manipulation security.

The aim of this invention is to increase the reliability of network automation through distributed, safe and automated migration of network applications or control functions.

The aim of the invention is to propose a possibility which avoids or at least reduces at least some of the disadvantages known in the prior art.

The present invention solves at least one of these disadvantages by means of a method according to the main claim and devices according to independent claims. Preferred further developments are the subject of the dependent claims.

According to the main claim, the solution according to the invention proposes a method for load allocation and monitoring for a resource to be allocated in a network. The resource to be allocated is a critical resource in the sense of a security of supply for a population group and / or a system. The network is divided into network units and each network unit has a network unit controller. The method has: provision of network unit control methods, network unit parameter data sets and subnetwork monitoring methods in at least one blockchain, the at least one blockchain being set up to keep static and / or dynamic data particularly efficient; assigning a sub-network monitoring unit to a part of the network; communicating a network unit control method to each network unit controller of the part of the network; transmit a network unit parameter data set to each network unit controller of the part of the network. The transmission of the network unit control method and the network unit parameter data records is cryptographically secured against reading and manipulation of the network unit control method and the network unit parameter data records in such a way that the corresponding reading and manipulation is largely excluded. And the transmission of the network unit control method and the network unit parameter data sets to the corresponding network unit controls takes place in such a way that by means of these network unit control methods and these network unit parameter data sets, proper functioning of each network unit control of the part of the network is guaranteed. The method also includes monitoring of the proper functioning of each network unit controller of the part of the network by the sub-network monitoring unit by means of a corresponding sub-network monitoring method.

A load allocation according to the present invention means the allocation of a portion of the resource to be allocated to the network, a sub-network or to a network unit.

A network unit according to the present invention means a device to which consumers are connected and which are assigned the required resource by this network unit.

A network unit controller according to the present invention means a controller for a network unit which takes over or controls the allocation of the required resource to the loads connected to the network unit.

A network unit control method according to the present invention means a method which provides or has an assignment routine for the assignment of a required resource to the consumers or consumers connected to the corresponding network unit.

A network unit parameter data set according to the present invention means data that are required for the functioning or control of the corresponding network unit controller or corresponding network unit. As a rule, these are, for example, setting parameters and / or also function parameters for the network unit controller or the corresponding network unit.

Part of a network according to the present invention means that the network can be divided into segments. Each segment corresponds to a different part of the network. This division is usually not of a logical nature, so it is usually a virtual division. The network preferably consists of at least two or three segmentations. In principle, however, any number of segmentations are possible. In a very small network, only a single segment can be provided so that the part of the network encompasses the entire network. Each part of the network preferably contains at least two network units. However, if the network is divided into a large number of segments or a segmentation that is not uniformly distributed is selected, part of the network, i.e. a segment, can also consist of just one network unit. A segmentation can be selected, for example, according to consumer types, consumer locations, network unit types, network unit locations and many more criteria. Segmentation can also take place by random decision. The segmentation of the network can thus be viewed as dynamic or quasi-static over the entire duration, depending on the period over which the segmentation is considered. The segmentation can, however, also remain unchanged over a longer period of time and can thus be viewed as static.

A sub-network monitoring method according to the present invention means a method which takes over the higher-level monitoring of a part of the network or is responsible for it. The sub-network monitoring method can also have a control function of the corresponding sub-network or its network unit controllers or its network units.

A blockchain according to the present invention means a continuously expandable list of data records, also called “blocks”, which are linked to one another by means of cryptographic methods. Each block typically contains a cryptographically secure hash value (scatter value) of the previous block, a time stamp and transaction data. This concept is also known as distributed ledger technology.

Static data according to the present invention means data which as a rule are not or only rarely changed over an operating period.

In contrast, dynamic data according to the present invention means data which are subject to constant or frequent changes during operation.

A particularly efficient provision in accordance with the present invention means that the data to be retained are particularly easily, quickly, compactly or otherwise inexpensively retained in a required manner, with regard to the course of the method.

Reading according to the present invention means that required information or data is taken from the data stream during its transmission and / or also in the state stored in a memory before or after the transmission.

A manipulation according to the present invention means that required information or data is changed during its transmission in the data stream and / or also in the state stored in a memory before or after the transmission.

A read-out and manipulation to the greatest possible extent in accordance with the present invention means that, according to the prevailing opinion at least at the time of submission, this is not possible with a reasonable effort and time. However, this preferably applies at the time the method is carried out. In this context, the point in time preferably means a period of time which is in a chronologically relevant proximity before the point in time of execution of the method.

Ensuring proper function according to the present invention means that it is ensured that the function can be carried out safely and correctly.

The inventive method has the advantage that both a Network automation and the reliability of the network can be increased.

The subject matter of a first independent claim of the invention comprises a network unit control device for controlling a network unit within a network, the network preferably being a network for a resource to be allocated, and the resource to be allocated being a critical resource in terms of security of supply for a population group and / or a system. The network unit control device has: transmitting and / or receiving means, the transmitting and / or receiving means being set up to transmit a network unit control method and / or a network unit parameter data set of the network unit control device from and / or to a network monitoring unit or a sub-network monitoring unit. The transmission of the network unit control method and / or the network unit parameter data set is cryptographically secured against reading and manipulation of the network unit control method and / or the network unit parameter data set in such a way that the corresponding reading out and manipulation of the transmission is largely excluded. The network unit control device is set up to ensure proper operation of the corresponding network unit based on the network unit control method and / or the network unit parameter data set. And the network unit control device is set up to at least partially carry out a method according to the invention.

The network unit control device according to the invention has the advantage that both network automation and the reliability of the network can be increased.

The subject matter of a further independent claim of the invention has a monitoring device for monitoring network unit control devices of corresponding network units within a network, the network preferably being a network for a resource to be allocated, and the resource to be allocated being a critical resource in terms of security of supply Population group and / or a system. The monitoring device has: storage means for holding network unit control methods, network unit parameter data sets and sub-network monitoring methods in at least one blockchain, the at least one blockchain being set up to hold static and / or dynamic data particularly efficiently; Transmitting and / or receiving means, the transmitting and / or receiving means being set up to transmit network unit control methods and / or network unit parameter data sets of the network unit control devices from and / or to the network unit control devices. The transmission of the network unit control method and / or the network unit parameter data records is cryptographically secured against reading and manipulation of the network unit control method and / or the network unit parameter data records in such a way that the corresponding reading out and manipulation of the transmission is largely excluded. And the monitoring device also has: a monitoring means for monitoring proper operation of the corresponding network units or proper functioning of the corresponding network unit control devices, based on the network unit control method and / or the network unit parameter data records. And the monitoring device is set up to at least partially carry out a method according to the invention.

The monitoring device according to the invention has the advantage that both network automation and the reliability of the network can be increased.

The subject of a further independent claim of the invention has a load allocation and monitoring system for a resource to be allocated in a network, preferably for a critical resource in the sense of a security of supply for a population group and / or a system, and wherein the network is divided into network units and each Network unit has a network unit controller. The load allocation and monitoring system has: storage means for holding network unit control methods, network unit parameter data sets and sub-network monitoring methods in at least one blockchain, the at least one blockchain being set up to keep static and / or dynamic data particularly efficient; Assignment means for assigning a subnet monitoring unit to a part of the network; Transmission means for transmitting a network unit control method to each network unit controller of the part of the network; Another transmission means for transmitting a network unit parameter data set to each network unit controller of the part of the network. The transmission of the network unit Control method and the network unit parameter data sets are cryptographically secured against reading and manipulation of the network unit control method and the network unit parameter data sets in such a way that the corresponding reading out and manipulation is largely excluded. And the transmission of the network unit control method and the network unit parameter data sets to the corresponding network unit controls takes place in such a way that by means of these network unit control methods and these network unit parameter data sets, proper functioning of each network unit control of the part of the network is guaranteed. And the load allocation and monitoring system furthermore has: a monitoring means for monitoring the proper functioning of each network unit control of the part of the network by the sub-network monitoring unit by means of a corresponding sub-network monitoring method. And the system is set up to carry out a method according to the invention.

Corresponding load assignments are made to the individual network units by means of the network unit control and the use of the network unit control method, the network unit parameter data sets and the sub-network monitoring method.

The load allocation and monitoring system according to the invention has the advantage that both network automation and the reliability of the network can be increased.

The subject matter of a further independent claim relates to a computer program product for a device according to the invention, the device being operable according to a method according to the invention.

The teaching according to the invention has the advantage that the method can be carried out automatically in a particularly efficient manner.

The subject matter of a further independent claim relates to a data carrier having a computer program product according to the invention.

The teaching according to the invention achieves the advantage that the method can be distributed or maintained particularly efficiently among the devices and / or systems executing the method.

Before embodiments of the invention are described in more detail below, it should first be noted that the invention is not limited to the components described or the method steps described. Furthermore, the terminology used does not represent any restriction, but is merely an example. Insofar as the singular is used in the description and the claims, the plural is also included, unless the context explicitly excludes this. If the context does not explicitly exclude this, any procedural steps can be carried out automatically. Corresponding process sections can lead to corresponding device properties and vice versa, so that, unless the context explicitly excludes this, a change from a method feature to a device feature is made possible and vice versa.

Further exemplary embodiments of the method according to the invention are explained below.

According to a first preferred embodiment, the method further comprises: assigning a further sub-network monitoring unit to a further part of the network; transmitting a network unit control method to each network unit controller of the further part of the network; transmitting a network unit parameter data set to each network unit controller of the further part of the network; and monitor the proper functioning of each network unit controller of the further part of the network by the further sub-network monitoring unit by means of a corresponding sub-network monitoring method.

This refinement has the advantage that both the network automation and the reliability of the network can be increased even further.

According to a further preferred embodiment, the method further comprises: reading in network information, the network information being indicative of the proper functioning of each network unit controller of the network to be monitored.

This configuration has the advantage that the functional reliability of the network can be increased.

According to a further preferred embodiment, the method also has that the reading in of network information comprises: reading in of network information for each part of the network; and storing the read-in network information for each part of the network in the corresponding subnetwork monitoring unit.

This embodiment has the advantage that the network automation of the network can be increased even further.

According to a further preferred embodiment, the method furthermore has that the reading in and / or stored provision of the network information is cryptographically secured in this way against reading and manipulation of the network information, the corresponding reading and manipulation is largely excluded.

This embodiment has the advantage that the security of the network can be increased.

According to a further preferred embodiment, the method also has that the transmission of a network unit control method to each network unit controller of each part of the network, the transmission of a network unit parameter data set to each network unit controller of each part of the network and / or the reading-in of network information for each part of the network and the stored provision of the read-in network information for each part of the network in the corresponding sub-network monitoring unit, based on a smart contracting process.

Smart contracting according to the present invention means computer protocols and / or virtual software-based protocols that map or check contracts or technically support the negotiation or processing of a contract. A written fixation of the contract on paper may thus be superfluous. Smart contracts technically map the logic of contractual regulations.

For the purposes of the invention, smart contracts are self-executing codes that automate workflows or processes. They are located on blockchain nodes and are therefore decentralized and cryptographically secured. Therefore, changes or additions to the smart contract code are not easily possible. Such a smart contract is triggered by a transaction. It is then executed automatically and specified on each node in the network, based on the data entered in the transmitted transaction and the world status of the smart contract, i.e. the data stored on the blockchain node. Smart contracts make it unnecessary for a third party to facilitate the exchange of information and / or instructions between the transaction partners or devices, since all network nodes execute the contract and reach a consensus on the output generated. If a node is malicious or altered, it will produce mixed results and prevent the network from reaching consensus. Because of its non-deterministic character, the transaction is therefore rejected. In addition, all transactions are digitally signed and stored in an immutable ledger, which maintains data integrity and allows historical tracking or data reviewability. Because of all these properties, such a blockchain-based smart contract according to the invention offers the possibility of improving the reliability of network automation.

This refinement has the advantage that both the network automation and the reliability of the network can be increased even further.

According to a further preferred embodiment, the method also has a further blockchain. And the blockchain is set up to hold static data particularly efficiently, and the other blockchain is set up to hold dynamic data particularly efficiently.

This embodiment has the advantage that the security of the network can be increased even further.

According to a further preferred embodiment, the method also has a particularly efficient storage of data in the corresponding blockchain, a particularly memory-efficient and / or particularly time-efficient processing of the corresponding data.

This refinement has the advantage that the execution speed of the network can be increased and / or that the costs can be reduced since lower requirements can be placed on the hardware.

According to a further preferred embodiment, the method also has: randomized, periodic and / or triggered assignment of each network unit control method to each network unit controller; and randomized, periodic and / or triggered assignment of each network unit parameter data set to each network unit controller.

A randomized assignment according to the present invention means an assignment based on a triggered random event. This can in particular mean an assignment according to a common random principle.

A periodic assignment in accordance with the present invention means an assignment according to a chronological and / or numerical sequence. In particular, this can mean that each time a defined period of time has expired, a new assignment takes place. This reassignment can then take place randomly, for example. In this case the segmentation can be viewed as dynamic.

With this technique, the system can avoid failures because the actor's execution environment is not fixed and it would be difficult for any attacker to predict the actor's execution location. These actors can usually be automated processes (algorithms) for network monitoring and for controlling the network or network units. Assuming a recurring migration is triggered before the runtime fails, then the actor is migrated to a new runtime and the attack is carried out. Such a runtime can be hardware - i.e. a device - that hosts these actors, that is, receives and makes them available. In addition, the attacker cannot immediately predict the new location of the actor, since the target duration is chosen randomly by the smart contract. Therefore, periodic migration can make the system more robust and reliable. However, only one actor can be migrated at a time if several actors are present at runtime. Furthermore, it may be appropriate or necessary for implementation to provide actuators for network monitoring, control, safety functions / algorithms and / or the runtime.

1. 1. Jede Laufzeit ist in Betrieb und löst die Migration automatisch in festen Zeitabständen aus.
2. 2. Runtime übergibt eine Blockchain-Transaktion, die eine intelligente Vertragslogik ausführt.
3. 3. Smart Contract erzeugt eine Ausgabe, die die Ziel-Laufzeit-ID, die ID des Migrationsakteurs und den Status des Akteurs enthält.
4. 4. Die aktuelle Laufzeit führt die eigentliche Migration unter Verwendung des Outputs des Smart Contract durch.
5. 5. Wenn die Migration erfolgreich war, unterbreitet die aktuelle Laufzeit beziehungsweise das Verfahren eine weitere Transaktion zur Aktualisierung des Blockkettenzustands, das heißt, zur Aktualisierung des Eigentums, also der Teilnetzüberwachungseinheit, der Netzeinheit-Steuerung und/oder der Netzeinheit, des migrierten Akteurs, also der Teilnetzüberwachungseinheit.

The steps to carry out the migration can be described as follows:

1. 1. Each runtime is in operation and automatically triggers the migration at fixed time intervals.
2. 2. Runtime passes a blockchain transaction that executes intelligent contract logic.
3. 3. Smart Contract generates an output that contains the target runtime ID, the ID of the migration actor and the status of the actor.
4. 4. The current runtime performs the actual migration using the output of the smart contract.
5. 5. If the migration was successful, the current runtime or the method submits a further transaction to update the blockchain status, that is, to update the property, i.e. the sub-network monitoring unit, the network unit controller and / or the network unit, of the migrated actor the sub-network monitoring unit.

A triggered assignment according to the present invention means an assignment that is triggered by the occurrence of a specific event. This assignment can then take place randomly, for example. In this case, the segmentation can be viewed as quasi-static.

1. 1. Ein Heartbeat-Darsteller, der auf jeder Runtime, also der Teilnetzüberwachungseinheit läuft, überprüft regelmäßig, ob andere Runtimes funktionieren oder nicht. Wenn eine Laufzeit, also eine Teilnetzüberwachungseinheit ausfällt, werden alle anderen Laufzeiten im gleichen Netzwerk ihren Fehler entdecken, da sie kein Heartbeat-Signal von der ausgefallenen Laufzeit erhalten.
2. 2. Alle anderen Laufzeiten im gleichen Netzwerk stoppen ihre periodische Migration.
3. 3. Es muss eine neue operative Laufzeit ausgewählt werden, die für die Neuverteilung der Akteure, also Netzeinheit-Steuerungsverfahren, Netzeinheit-Parameterdatensätze, und/oder Netzeinheit-Steuerung, der ausgefallenen Laufzeit verantwortlich ist.
4. 4. Die ausgewählte Laufzeit sendet eine Blockchain-Transaktion, die die ID der fehlerhaften Laufzeit enthält.
5. 5. Smart Contract verarbeitet die Transaktion und wählt die neue optimale Laufzeit für die Platzierung eines Akteurs der ausgefallenen Laufzeit. Es werden Ergebnisse generiert, die die Ziel-Laufzeit-ID, die Akteur-ID (der zu re-deployierende Akteur) und den Status des Akteurs (der zuletzt gespeicherte Zustand vor dem Fehler) beinhalten.
6. 6. Der ausgewählte Knoten analysiert den Zustand des Akteurs, konfiguriert die Aktorports neu und leitet dann den Einsatz des Akteurs auf der gewählten Ziellaufzeit ein.
7. 7. Wenn die Bereitstellung erfolgreich ist, sendet der ausgewählte Knoten eine weitere Blockchain-Transaktion, um das Eigentum des neu bereitgestellten Akteurs zu aktualisieren.
8. 8. Der ausgewählte Knoten wiederholt die Schritte von 3 bis 5, bis alle Akteure der fehlgeschlagenen Laufzeit erneut bereitgestellt wurden.
9. 9. Nach Abschluss der erneuten Bereitstellung sendet die ausgewählte Laufzeit eine Blockchain-Transaktion, um den Status der fehlgeschlagenen Laufzeit zu aktualisieren, so dass die Logik des Smart Contract diese Laufzeit in ihrem Laufzeitauswahlprozess nicht berücksichtigt.
10. 10. Die ausgewählte Laufzeit informiert andere Laufzeiten, ihre periodische Migration neu zu starten.

Diese Ausgestaltung weist den Vorteil auf, dass sowohl die Netzautomatisierung als auch die Ausfallsicherheit des Netzwerkes noch weiter erhöht werden kann.For example, in the event of a runtime error, all actors, i.e. network unit controls, that run on this runtime must be provided again or migrated to a new execution environment, i.e. to a different subnet monitoring unit, in order to minimize the downtimes of the services. In the blockchain, the status of each actor is securely saved at regular intervals and the last saved status can be used to deal with the error. The status of an actor can contain connection information such as inports and outports, which can be useful when redeploying. This method looks similar to a checkpoint / restart technique. For example, a method for recovering actors from a failed runtime might look like this:

1. 1. A heartbeat actor, which runs on every runtime, ie the subnet monitoring unit, regularly checks whether other runtimes are working or not. If a runtime, i.e. a subnet monitoring unit, fails, all other runtimes in the same network will discover their error, since they do not receive a heartbeat signal from the failed runtime.
2. 2. All other runtimes in the same network stop their periodic migration.
3. 3. A new operational runtime must be selected that is responsible for the redistribution of the actors, that is, network unit control methods, network unit parameter data sets, and / or network unit control, of the failed runtime.
4. 4. The selected runtime sends a blockchain transaction containing the ID of the failed runtime.
5. 5. Smart Contract processes the transaction and selects the new optimal term for placing an actor of the failed term. Results are generated that contain the target runtime ID, the actor ID (the actor to be re-deployed) and the status of the actor (the last saved state before the error).
6. 6. The selected node analyzes the state of the actor, reconfigures the actor ports and then initiates the use of the actor on the selected target runtime.
7. 7. If the deployment is successful, the selected node will send another blockchain transaction to update the ownership of the newly deployed actor.
8. 8. The selected node repeats steps 3 through 5 until all actors of the failed runtime have been redeployed.
9. 9. After the re-provisioning is complete, the selected runtime will send a blockchain transaction to update the status of the failed runtime so that the logic of the smart contract does not consider this runtime in its runtime selection process.
10. 10. The selected runtime informs other runtimes to restart their periodic migration.

This refinement has the advantage that both the network automation and the reliability of the network can be increased even further.

According to a further preferred embodiment, the method furthermore has that the randomized, periodic and / or triggered assignment of each network unit control method to each network unit controller, taking into account an ability to execute the network unit control method to be assigned, for the corresponding network unit controller , takes place in the network unit controller to be assigned.

An ability to execute the network unit control method to be assigned according to the present invention means that the complexity of the network unit control method to be assigned must not exceed the complexity or capabilities of the network unit controller or must be adapted to its complexity, thus not detrimental to proper control of the network unit concerned by the network unit controller to be operated with the network unit control method to be assigned.

This refinement has the advantage that both the network automation and the proper functionality of the individual network units can be increased even further.

According to a further preferred embodiment, the method also has that the randomized, periodic and / or triggered assignment of each network unit control method to each network unit controller, and the randomized, periodic and / or triggered assignment of each network unit parameter data set to a each network unit controller takes place within the respective part of the network of that subnet monitoring unit that is responsible for the respective part of the network.

This refinement has the advantage that both the network automation and the reliability of the network can be increased even further.

According to a further preferred embodiment, the method furthermore has the provision of network unit control methods, network unit parameter data sets and subnetwork monitoring methods in at least one blockchain based on a time stamp method.

A time stamp method according to the present invention means a method which can assign an unambiguous point in time to an event.

This embodiment has the advantage that the security of the network can be increased even further.

According to a further preferred embodiment, the method furthermore has that the resource to be allocated is electrical energy to be distributed, a liquid to be distributed or a gas to be distributed.

This embodiment has the advantage that the method can be applied to the supply resources that are most important for human living.

According to a further preferred embodiment, the method further comprises: distributed assignment of each network unit controller of the network to each part of the network of each sub-network monitoring unit.

This refinement has the advantage that both the network automation and the reliability of the network can be increased even further.

According to a further preferred embodiment, the method also has that the transmission of a network unit control method to each network unit controller of each part of the network and / or the transmission of a network unit parameter data set to each network unit controller of each part of the network and / or the reading-in of network information for each part of the network and / or the stored provision of the read-in network information for each part of the network in the corresponding sub-network monitoring unit takes place in real time.

Real-time according to the present invention characterizes the operation of information technology systems which can reliably deliver certain results within a predetermined period of time, for example in a fixed time grid.

The hardware and software must ensure that there are no delays occur which could prevent compliance with this condition. The data does not have to be processed particularly quickly, it just has to be guaranteed to be fast enough for the respective application. The currently relevant standard for this is DIN ISO / IEC 2382 (as amended in May 2015).

This embodiment has the advantage that the functional reliability of the network can be increased even further.

According to a further preferred embodiment, the method also has, in the event of a failure of any subnetwork monitoring unit: Distributed assignment of those network unit controls that are part of the network of the failed subnetwork monitoring unit to the remaining subnetwork monitoring units not affected by the failure.

This refinement has the advantage that both the network automation and the reliability of the network can be increased even further.

• 1 eine schematische Darstellung eines vorgeschlagenen Netzwerkes, welches mittels eines Verfahrens gemäß einer beispielhaften Ausgestaltung der Erfindung betrieben wird;
• 2 eine schematische Darstellung eines Ablaufes des in 1 vorgeschlagenen Verfahrens gemäß einer weiteren beispielhaften Ausgestaltung der Erfindung;
• 3 eine schematische Darstellung einer ersten vorgeschlagenen Vorrichtung gemäß einer weiteren beispielhaften Ausgestaltung der Erfindung;
• 4 eine schematische Darstellung einer weiteren vorgeschlagenen Vorrichtung gemäß einer weiteren beispielhaften Ausgestaltung der Erfindung; und
• 5 eine schematische Darstellung einer weiteren vorgeschlagenen Vorrichtung gemäß einer weiteren beispielhaften Ausgestaltung der Erfindung.

The invention will be explained in more detail below with reference to the figures. In these show:

• 1 a schematic representation of a proposed network which is operated by means of a method according to an exemplary embodiment of the invention;
• 2 a schematic representation of a sequence of the in 1 proposed method according to a further exemplary embodiment of the invention;
• 3 a schematic representation of a first proposed device according to a further exemplary embodiment of the invention;
• 4th a schematic representation of a further proposed device according to a further exemplary embodiment of the invention; and
• 5 a schematic representation of a further proposed device according to a further exemplary embodiment of the invention.

The invention will be illustrated in more detail below with reference to the figures. It should be noted that different aspects are described that can be used individually or in combination. I.e. any aspect can be used with different embodiments of the invention unless explicitly shown as a pure alternative.

Furthermore, for the sake of simplicity, reference is generally only made to one entity in the following. Unless explicitly noted, the invention can also have several of the entities concerned. In this respect, the use of the words “a”, “an” and “an” is only to be understood as an indication that at least one entity is used in a simple embodiment.

As far as methods are described below, the individual steps of a method can be arranged and / or combined in any order, unless the context explicitly results in something different. Furthermore, the processes can be combined with one another - unless expressly indicated otherwise.

Figures with numerical values are generally not to be understood as exact values, but also include a tolerance of +/- 1% up to +/- 10%.
Insofar as standards, specifications or the like are named in this application, reference is at least always made to the standards, specifications or the like applicable on the filing date. That is, if a standard / specification etc. is updated or replaced by a successor, the invention can also be applied to this.

Various embodiments are shown in the figures.

1 shows a schematic representation of a proposed network which is operated by means of a method according to an exemplary embodiment of the invention.

It shows 1 a schematic representation of a load allocation and monitoring system according to the invention 160 for a resource to be assigned in a network 100 , preferably for a critical resource in the sense of a security of supply of a population group and / or a system, and the network 100 in network units 101 is divided and each network unit 101 a network unit controller 211 having. Any network unit 101 can also use several network unit controls 211 exhibit. The load allocation and monitoring system 160 has monitoring devices according to the invention 150 on, for surveillance 50 of network unit controllers 211 corresponding network units 101 within a network 100 . The load allocation and monitoring system 160 further comprises network unit control devices according to the invention 211 to control a network unit 101 within a network 100 on. Furthermore, a method according to the invention provides for load allocation and monitoring for the resource to be allocated in the network 100 .

Thus, the load allocation and monitoring system according to the invention 160 on: reserve means 151 , to hold 10 (not in 1 shown) of network unit control methods 11 (not in 1 shown), network unit parameter records 12th (not in 1 shown) and subnetwork monitoring procedures 13 (not in 1 shown) in at least one blockchain 300 (not in 1 shown). This is at least one blockchain 300 set up to keep static and / or dynamic data particularly efficient. Allocation means 161 to assign 20th (not in 1 shown) a subnetwork monitoring unit 111 to part of the network 110 . A means of transmission 162 to transmit 30th a network unit control method 11 to each network unit controller 211 of the part of the network 110 . Another means of transmission 163 (not in 1 shown) to transmit 40 a network unit parameter data set 12th to each network unit controller 211 of the part of the network 110 . This is the transmission 30th , 40 the network unit control method 11 and the network unit parameter records 12th cryptographically secured in this way against reading and manipulation of the network unit control method 11 and the network unit parameter records 12th Set up in such a way that the corresponding reading out and manipulation is largely excluded. And this is where the transmission takes place 30th , 40 the network unit control method 11 and the network unit parameter records 12th to the corresponding network unit controls 211 such that by means of this network unit control method 11 and these network unit parameter data sets 12th proper functioning of each network unit controller 211 of the part of the network 110 is guaranteed. And further, the load allocation and monitoring system 160 a monitoring agent 152 on, to monitor 50 the proper functioning of each network unit controller 211 of the part of the network 110 by the sub-network monitoring unit 111 by means of a corresponding sub-network monitoring process 13 .

2 shows a schematic representation of a process sequence according to the invention for the in 1 proposed load allocation and monitoring system 160 , according to a further exemplary embodiment of the invention.

It shows 2 a method for load allocation and monitoring for an allocable resource in a network 100 , wherein the resource to be allocated is a critical resource in terms of security of supply for a population group and / or a system, the network 100 in network units 101 is divided and each network unit 101 a network unit controller 211 having, the method comprising: holding 10 of network unit control methods 11 , Network unit parameter records 12th and subnet monitoring procedures 13 in at least one blockchain 300 , where the at least one blockchain 300 is set up to keep static and / or dynamic data particularly efficient. To assign 20th a sub-network monitoring unit 111 to part of the network 110 . To transfer 30th a network unit control method 11 to each network unit controller 211 of the part of the network 110 . To transfer 40 a network unit parameter data set 12th to each network unit controller 211 of the part of the network 110 . The transmission takes place 30th , 40 the network unit control method 11 and the network unit parameter records 12th cryptographically secured in this way against reading and manipulation of the network unit control method 11 and the network unit parameter records 12th that the corresponding reading and manipulation is largely excluded. And this is where the transmission takes place 30th , 40 the network unit control method 11 and the network unit parameter records 12th to the corresponding network unit controls 211 such that by means of this network unit control method 11 and these network unit parameter data sets 12th proper functioning of each network unit controller 211 of the part of the network 100 is guaranteed. And the method also includes: monitoring 50 the proper functioning of each network unit controller 211 of the part of the network 110 by the sub-network monitoring unit 111 by means of a corresponding sub-network monitoring process 13 .

3 shows a schematic representation of a first proposed device according to a further exemplary embodiment of the invention.

It shows 3 a schematic representation of a network unit control device according to the invention 211 to control a network unit 101 within a network 100 , the network 100 is preferably a network for a resource to be assigned, and wherein the resource to be assigned is a critical resource in terms of security of supply for a population group and / or a system, the network unit control device 211 having: transmitting and / or receiving means 130 , the sending and / or receiving means 130 is set up to transmit 30th , 40 a network unit control method 11 and / or a network unit parameter data set 12th the network unit control device 211 from and / or to a network monitoring unit or a sub-network monitoring unit 111 . The conveying 30th , 40 of the network unit control method 11 and / or the network unit parameter data set 12th is cryptographically secured against Reading and manipulating the network unit control procedure 11 and / or the network unit parameter data set 12th such that the corresponding reading and manipulation of the transmission 30th , 40 is largely excluded. Here is the network unit control device 211 set up based on the network unit control method 11 and / or the network unit parameter data set 12th correct operation of the corresponding power unit 101 to guarantee. And there is the network unit control device 211 set up to at least partially carry out a method according to the invention.

4th shows a schematic representation of a further proposed device according to a further exemplary embodiment of the invention.

It shows 4th a schematic representation of a monitoring device according to the invention 150 , for monitoring 50 of network unit controllers 211 corresponding network units 101 within a network 100 , the network 100 is preferably a network for a resource to be assigned, and wherein the resource to be assigned is a critical resource in the sense of security of supply for a population group and / or a system, the monitoring device 150 having: reserve means 151 , to hold 10 of network unit control methods 11 , Network unit parameter records 12th and subnet monitoring procedures 13 in at least one blockchain 300 , where the at least one blockchain 300 is set up to keep static and / or dynamic data particularly efficient. A sending and / or receiving means 130 , the sending and / or receiving means 130 is set up to transmit 30th , 40 of network unit control methods 11 and / or from network unit parameter data sets 12th of the network unit control devices 211 from and / or to the network unit control devices 211 . The transmission takes place 30th , 40 the network unit control method 11 and / or the network unit parameter data sets 12th cryptographically secured against reading and manipulation of the network unit control procedures 11 and / or the network unit parameter data sets 12th such that the corresponding reading and manipulation of the transmission 30th , 40 is largely excluded. The monitoring device 150 further comprises a monitoring means 152 on, to monitor 50 proper operation of the corresponding network units 101 or a proper function of the corresponding network unit control devices 211 , based on the network unit control method 11 and / or the network unit parameter data sets 12th . And there is the monitoring device 150 set up to at least partially carry out a method according to the invention.

5 shows a schematic representation of a further proposed device according to a further exemplary embodiment of the invention.

It shows 5 a schematic representation of a load allocation and monitoring system according to the invention 160 for a resource to be assigned in a network 100 , preferably for a critical resource in the sense of a security of supply of a population group and / or a system, and the network 100 in network units 101 is divided and each network unit 101 a network unit controller 211 comprises the load allocation and monitoring system 160 having: reserve means 151 , to hold 10 of network unit control methods 11 , Network unit parameter records 12th and subnet monitoring procedures 13 in at least one blockchain 300 . This is at least one blockchain 300 set up to keep static and / or dynamic data particularly efficient. Allocation means 161 to assign 20th a subnetwork monitoring unit 111 to part of the network 110 . A means of transmission 162 to transmit 30th a network unit control method 11 to each network unit controller 211 of the part of the network 110 . Another means of transmission 163 to transmit 40 a network unit parameter data set 12th to each network unit controller 211 of the part of the network 110 . This is the transmission 30th , 40 the network unit control method 11 and the network unit parameter records 12th cryptographically secured in this way against reading and manipulation of the network unit control method 11 and the network unit parameter records 12th Set up in such a way that the corresponding reading out and manipulation is largely excluded. And this is where the transmission takes place 30th , 40 the network unit control method 11 and the network unit parameter records 12th to the corresponding network unit controls 211 such that by means of this network unit control method 11 and these network unit parameter data sets 12th proper functioning of each network unit controller 211 of the part of the network 110 is guaranteed. And furthermore, the load allocation and monitoring system 160 a monitoring agent 152 on, to monitor 50 the proper functioning of each network unit controller 211 of the part of the network 110 by the sub-network monitoring unit 111 by means of a corresponding sub-network monitoring process 13 . And the system is set up to carry out a method according to the invention.

• Das gesamte Stromnetz 100 kann vollständig durch Überwachung und Steuerung der Segmente 110 betrieben werden. Jedes Segment 110 besteht aus verschiedenen Sensoren und Aktoren, den Netzeinheit-Steuerungen 211. Die Teilnetzüberwachungseinheiten 111 sind für die Überwachung und Steuerung eines jeden Segmentes 110 des Stromnetzes 100 eingerichtet. Jede Teilnetzüberwachungseinheit 111 empfängt Echtzeitdaten von entsprechenden Netzeinheit-Steuerungen 211 und verwendet die Zuweisungsmittel 161, Übermittlungsmittel 162 und Überwachungsmittel 152 zur Überwachung, Steuerung und zum Schutz der Segmente 110. Die von den Teilnetzüberwachungseinheiten 111 empfangenen Echtzeitdaten werden in einer Blockchain 300 gespeichert. Die Teilnetzüberwachungseinheiten 111 können miteinander kommunizieren. Dabei können vorzugsweise alle Teilnetzüberwachungseinheiten 111 miteinander kommunizieren. Sie bilden ein vermaschtes Netzwerk von Teilnetzüberwachungseinheiten 111. Die Teilnetzüberwachungseinheiten 111 sind dabei in Hardware ausgeführt, in der die Zuweisungsmittel 161, Übermittlungsmittel 162 und Überwachungsmittel 152 gehostet werden, wobei sie die Rechenressourcen der jeweiligen Teilnetzüberwachungseinheiten 111 nutzen. Die Lastzuweisung entspricht dabei im Prinzip der Zuweisung von Zuweisungsmittel 161, Übermittlungsmittel 162, Überwachungsmittel 152 und Vorhaltemittel 151 an verschiedene Teilnetzüberwachungseinheiten 111. Jede Teilnetzüberwachungseinheit 111 kann dabei auch die Blockchain 300 hosten. Vorzugsweise hostet jede Teilnetz-überwachungseinheit 111 die (gleiche) Blockchain 300. Die Teilnetzüberwachungseinheiten 111 können miteinander kommunizieren und ihre verfügbaren Rechenressourcen, Bandbreiten und dergleichen in der Blockchain 300 speichern. Dies kann dabei inklusive aller anderen notwendigen Daten für eine optimale Zuordnung von Zuweisungsmittel 161, Übermittlungsmittel 162, Überwachungsmittel 152 und Vorhaltemittel 151 erfolgen. Die Ressourcenzuweisung kann innerhalb des Netzwerks der Teilnetzüberwachungseinheiten 111 erfolgen. Die smart contract basierte Ressourcenzuweisung kann dabei für die Zuweisungsmittel 161, Übermittlungsmittel 162, Überwachungsmittel 152 und Vorhaltemittel 151 von Teilnetzüberwachungseinheit 111 zu Teilnetzüberwachungseinheit 111 erfolgen.

The invention can also be carried out using an electrical power network as an example 100 explained:

• The entire power grid 100 can be done completely by monitoring and controlling the segments 110 operate. Every segment 110 consists of various sensors and actuators, the network unit controls 211 . The sub-network monitoring units 111 are for monitoring and controlling each segment 110 of the power grid 100 furnished. Each subnet monitoring unit 111 receives real-time data from appropriate network unit controllers 211 and uses the allocation means 161 , Means of transmission 162 and monitoring means 152 for monitoring, controlling and protecting the segments 110 . The ones from the subnetwork monitoring units 111 Real-time data received is stored in a blockchain 300 saved. The sub-network monitoring units 111 can communicate with each other. In this case, all subnetwork monitoring units can preferably 111 communicate with each other. They form a meshed network of subnet monitoring units 111 . The sub-network monitoring units 111 are implemented in hardware in which the allocation means 161 , Means of transmission 162 and monitoring means 152 are hosted, using the computing resources of the respective subnet monitoring units 111 use. The load allocation corresponds in principle to the allocation of allocation means 161 , Means of transmission 162 , Monitoring means 152 and reserve means 151 to various subnetwork monitoring units 111 . Each subnet monitoring unit 111 can also use the blockchain 300 host. Each subnetwork supervisor preferably hosts 111 the (same) blockchain 300 . The sub-network monitoring units 111 can communicate with each other and their available computing resources, bandwidths and the like in the blockchain 300 to save. This can include all other necessary data for an optimal allocation of allocation means 161 , Means of transmission 162 , Monitoring means 152 and reserve means 151 respectively. The resource allocation can take place within the network of the subnet monitoring units 111 respectively. The smart contract-based resource allocation can be used for the allocation means 161 , Means of transmission 162 , Monitoring means 152 and reserve means 151 from subnetwork monitoring unit 111 to sub-network monitoring unit 111 respectively.

There can be two types of network unit controls 211 give: On the one hand network unit controls 211 that only send data and to other network unit controllers 211 that are also able to receive control commands. A sub-network monitoring unit 111 can be used with any type of network unit controller 211 or only with mains unit controls 211 that are also able to receive control commands interact. The network unit controls 211 in a corresponding part of the network / segment 110 be present, taking the entire part of the network 110 and not just a network unit 101 becomes controllable.

List of reference symbols

10

Provision of network unit control methods, network unit parameter data sets and sub-network monitoring methods

11

Network unit control method

12

Network unit parameter data set

13

Subnet monitoring procedure

20th

Assigning a subnet monitoring unit to a part of the network

30th

conveying a network unit control method to each network unit controller of the part of the network

40

transmit a network unit parameter data set to each network unit controller of the part of the network

50

monitor the proper functioning of each network unit control of the part of the network by the sub-network monitoring unit

60

Reading in network information

62

Reading in network information for each part of the network

64

stored holding of the network information read in for each part of the network in the corresponding subnet monitoring unit

70

randomized, periodic and / or triggered assignment of a network unit control method to a network unit controller

80

randomized, periodic and / or triggered assignment of a network unit parameter data set to a network unit controller

90

Distributed assignment of a network unit control of the network to a part of the network of a sub-network monitoring unit

100

network

101

Network unit

110

Part of the network

111

Sub-network monitoring unit

130

Sending and / or receiving means

150

Monitoring device

151

Reserve means

152

Monitoring means

160

Load allocation and monitoring system

161

Allocation means

162

Means of transmission

163

further means of transmission

211

Network unit control

300

Blockchain

310

another blockchain

Claims (19)

Method for load allocation and monitoring for a resource to be allocated in a network (100), the resource to be allocated being a critical resource in terms of security of supply for a population group and / or a system, the network (100) being divided into network units (101) and each network unit (101) has a network unit controller (211), the method comprising: - Provision (10) of network unit control methods (11), network unit parameter data sets (12) and sub-network monitoring methods (13) in at least one blockchain (300), the at least one blockchain (300) being set up to carry static and / or dynamic data particularly efficient to keep - assign (20) a sub-network monitoring unit (111) to a part of the network (110), - transmitting (30) a network unit control method (11) to each network unit controller (211) of the part of the network (110), - transmitting (40) a network unit parameter data set (12) to each network unit controller (211) of the part of the network (110), the transmission (30, 40) of the network unit control method (11) and the network unit parameter data sets ( 12) is cryptographically secured against reading out and manipulation of the network unit control method (11) and the network unit parameter data sets (12) in such a way that the corresponding reading out and manipulation is largely excluded, and wherein the transmission (30, 40) of the network unit control method (11) and the network unit parameter data sets (12) to the corresponding network unit controllers (211) takes place in such a way that by means of these network unit control methods (11) and these network unit parameter data sets ( 12) proper functioning of each network unit controller (211) of the part of the network (100) is guaranteed, and - monitor (50) the proper functioning of each network unit controller (211) of the part of the network (110) by the sub-network monitoring unit (111) by means of a corresponding sub-network monitoring method (13). Procedure according to Claim 1 , the method further comprising: - assigning (60) a further subnetwork monitoring unit (111) to a further part of the network (110), - further transmitting (30) a network unit control method (11) to each network unit controller (211) Part of the network (110), - transmit (40) a network unit parameter data set (12) to each network unit controller (211) of the further part of the network (110), and - monitor (50) the proper functioning of each network unit Control (211) of the further part of the network (110) by the further sub-network monitoring unit (111) by means of a corresponding sub-network monitoring method (13). Procedure according to Claim 1 or 2 wherein the method further comprises: - reading (60) of network information, the network information being indicative of the proper functioning of each network unit controller (211) of the network (100) to be monitored. Procedure according to Claim 3 , wherein the reading (60) of network information comprises: - reading (62) of network information for each part of the network (110), and - stored storage (64) of the network information read for each part of the network (110) in the corresponding subnet Monitoring unit (111). Procedure according to Claim 3 or 4th The reading in (60, 62, 64) and / or stored provision of the network information takes place cryptographically secured against reading out and manipulation of the network information in such a way that the corresponding reading out and manipulation is largely excluded. A method according to any one of the preceding claims, wherein transmitting (30) a network unit control method (11) to each network unit controller (211) of each part of the network (110), and transmitting (40) a network unit Parameter data set (12) to each network unit controller (211) of each part of the network (110), and / or the reading (62) of network information for each part of the network (110), and the stored holding (64) of the read Network information for each part of the network (110) in the corresponding sub-network monitoring unit (111), based on a smart contracting method. A method according to any one of the preceding claims, wherein the method comprises a further blockchain (310), and wherein the blockchain (300) is set up to hold static data particularly efficiently, and the further blockchain (310) is set up to hold dynamic data particularly efficiently. A method according to any one of the preceding claims, wherein particularly efficient storage of data in the corresponding blockchain (300, 310) comprises particularly memory-efficient and / or particularly time-efficient processing of the corresponding data. A method according to any of the preceding, the method further comprising: - Randomized, periodic and / or triggered assignment (70) of each network unit control method (11) to each network unit controller (211), and - randomized, periodic and / or triggered assignment (80) of each network unit parameter data set (12) to each network unit controller (211). Procedure according to Claim 9 wherein the randomized, periodic and / or triggered assignment (70) of each network unit control method (11) to each network unit controller (211), taking into account an ability to execute the network unit control method (11) to be assigned, for the corresponding network unit Control (211), in the network unit control (211) to be assigned. Procedure according to Claim 9 or 10 wherein the randomized, periodic and / or triggered assignment (70) of each network unit control method (11) to each network unit controller (211), and the randomized, periodic and / or triggered assignment (80) of each network unit parameter data set (12) to each network unit controller (211), in each case within the respective part of the network (110) of that sub-network monitoring unit (111) which is responsible for the respective part of the network (110). Method according to any one of the preceding claims, wherein the provision (10) of network unit control methods (11), network unit parameter data sets (12) and subnetwork monitoring methods (13) in at least one blockchain (300, 310) is based on a time stamp method. A method according to any one of the preceding claims, wherein the resource to be allocated is an electrical energy to be distributed, a liquid to be distributed or a gas to be distributed. A method according to any one of the preceding claims, the method further comprising: - Distributed assignment (90) of each network unit controller (211) of the network (100) to each part of the network (110) of each sub-network monitoring unit (111). A method according to any one of the preceding claims, wherein transmitting (30) a network unit control method (11) to each network unit controller (211) of each part of the network (110), and / or transmitting (40) a network unit parameter data set (12) to each network unit controller (211) of each part of the network (110), and / or reading in (60, 62) of network information for each part of the network (110), and / or the stored holding (64) of the network information read in for each part of the network (110) in the corresponding sub-network monitoring unit (111), takes place in real time. Method according to any of the foregoing Claims 2 to 15th wherein the method further comprises, in the event of a failure of any subnetwork monitoring unit (111): - Distributed assignment (92) of those network unit controllers (211) which are part of the network of the failed subnetwork monitoring unit (111) to the remaining ones, not from failure affected subnetwork monitoring units (111). Network unit control device (211) for controlling a network unit (101) within a network (100), wherein the network (100) is preferably a network for a resource to be assigned, and wherein the resource to be assigned is a critical resource in terms of security of supply for a population group and / or a system, the network unit control device (211) having: - transmitting and / or receiving means (130), wherein the transmitting and / or receiving means (130) is set up to transmit (30, 40) a network unit control method (11) and / or a network unit parameter data set (12) of the network unit control device (211) from and / or to a network monitoring unit or a sub-network monitoring unit (111), wherein the Transmission (30, 40) of the network unit control method (11) and / or the network unit parameter data set (12) is cryptographically secured against reading out and manipulation of the network unit control method (11) and / or the network unit parameter data set (12) in such a way that that the corresponding reading out and manipulation of the transmission (30, 40) is largely excluded, the network unit control device (211) being set up to use a network unit control method (11) and / or the network unit parameter data set (12) to ensure proper operation of the corresponding network unit (101), and wherein the network unit control device (211) for this purpose e is established, a method according to any of the Claims 1 to 16 at least partially. Monitoring device (150) for monitoring (50) network unit control devices (211) of corresponding network units (101) within a network (100), wherein the network (100) is preferably a network for a resource to be assigned, and wherein the resource to be assigned is a A critical resource in the sense of a security of supply for a population group and / or a system is the monitoring device (150) having: - Provision means (151) for the provision (10) of network unit control methods (11), network unit parameter data sets (12) and sub-network monitoring methods ( 13) in at least one blockchain (300), wherein the at least one blockchain (300) is set up to hold static and / or dynamic data particularly efficiently, - sending and / or receiving means (130), wherein the sending and / or Receiving means (130) is set up for transmitting (30, 40) network unit control methods (11) and / or network unit parameter data tzen (12) the network unit control devices (211) from and / or to the network unit control devices (211), wherein the transmission (30, 40) of the network unit control method (11) and / or the network unit parameter data sets (12) cryptographically secured against reading out and manipulation of the network unit control method (11) and / or the network unit parameter data sets (12) in such a way that the corresponding reading out and manipulation of the transmission (30, 40) is largely excluded, and a monitoring means (152), for monitoring (50) proper operation of the corresponding network units (101) or proper functioning of the corresponding network unit control devices (211), based on the network unit control method (11) and / or the network unit parameter data sets (12), and wherein the Monitoring device (150) is adapted to a method according to any of the Claims 1 to 16 at least partially. Load allocation and monitoring system (160) for a resource to be allocated in a network (100), preferably for a critical resource in terms of security of supply for a population group and / or a system, and wherein the network (100) is divided into network units (101) and Each network unit (101) has a network unit controller (211), the load allocation and monitoring system (160) having: - Provision means (151) for provision (10) of network unit control methods (11), network unit parameter data sets (12) and Subnetwork monitoring method (13) in at least one blockchain (300), the at least one blockchain (300) being set up to hold static and / or dynamic data particularly efficiently, - allocation means (161) for assigning (20) a subnetwork monitoring unit (111) to part of the network (110), - a transmission means (162), for transmitting (30) a network unit control method (11) to each network unit control (211) of the part of the network (110), - a further transmission means (163) for transmitting (40) a network unit parameter data set (12) to each network unit controller (211) of the part of the network (110) , the transmission (30, 40) of the network unit control method (11) and the network unit parameter data sets (12) being cryptographically secured against reading and manipulation of the network unit control method (11) and the network unit parameter data sets (12) in such a way that the corresponding reading out and manipulation is largely excluded, and the transmission (30, 40) of the network unit control method (11) and the network unit parameter data sets (12) to the corresponding network unit controllers (211) takes place in such a way that these network unit Control method (11) and these network unit parameter data sets (12) ensure that each network unit controller (211) of the part of the network (110 ) is guaranteed, and - a monitoring means (152) for monitoring (50) the proper functioning of each network unit controller (211) of the part of the network (110) by the sub-network monitoring unit (111) by means of a corresponding sub-network monitoring method (13), and the system being adapted to perform a method according to any one of Claims 1 to 16 execute.

Images