EP4245011A1

EP4245011A1 - Data provision method, sensor network and sensor

Info

Publication number: EP4245011A1
Application number: EP21814715.5A
Authority: EP
Inventors: Benjamin Bönisch; Tobias PLÖTZING; Sharang Parnerkar
Original assignee: ETO Magnetic GmbH
Current assignee: ETO Magnetic GmbH
Priority date: 2020-11-13
Filing date: 2021-11-11
Publication date: 2023-09-20
Also published as: CN116746113A; DE102020130087B3; US20240015027A1; WO2022101334A1; DE102020130087B8

Abstract

The invention relates to a data provision method, having a data generation step (10) in which electronic data are generated by at least one data generation apparatus (12), and having a provision step (14) in which the electronic data are provided in the form of data packets (18, 22) by means of a data transmission network (16), wherein during the provision step (14) the data packets (18, 22) are first written, preferably directly, to a blockchain or to a distributed ledger (52), and wherein during the provision step (14) the data transmission network (16) is used to provide the data packets (18, 22), preferably directly, from the blockchain or from the distributed ledger (52). According to the invention, provided data packets (18) comprise at least one encrypted and/or digitally signed data field (20, 20') with a reference to a, in particular random or quasi-random, subsequent address of the next data packet (22) following the data packet (18).

Description

Data provision method, sensor network and sensor

State of the art

The invention relates to a data provision method according to the preamble of claim 1, a sensor network according to claim 21 and a sensor according to claim 23.

It has already been suggested that sensor data be stored in blockchains or distributed ledgers in a tamper-proof manner.

The object of the invention consists in particular in providing a data transmission method with advantageous properties with regard to the verifiability of transmitted data and/or with regard to access control to transmitted data. The object is achieved according to the invention by the features of patent claims 1, 21 and 23, while advantageous configurations and developments of the invention can be found in the dependent claims.

Advantages of the Invention

The invention is based on a data provision method, with a data generation step in which electronic data is generated by at least one data generation device, and with a provision step in which the electronic data are provided via a data transmission network in the form of data packets, with the data packets in the provision step are preferably written directly, in particular via the data transmission network, first in a blockchain or in a distributed ledger and in which Provision step via the data transmission network, the data packets, preferably directly, are provided from the blockchain or from the distributed ledger.

It is proposed that, in particular in the providing step, provided data packets, preferably each data packet provided in the providing step, at least one, in particular cryptographically and/or electronically, encrypted and/or digitally signed data field with a reference to a, in particular random or quasi- include random, subsequent address of the next data packet following the data packet. This advantageously allows real-time verifiability (digital signature) of provided data, in particular of a data stream comprising successive data packets (data stream), and/or real-time access control (encryption) to provided data, in particular to the data stream. A high level of data security can advantageously be achieved, in particular with regard to verification of an authenticity of data packets provided in succession and/or with regard to access control to the data packets provided in succession. A decentralized data provision infrastructure can advantageously be made possible as a result, in particular by only sending cryptographic keys, for example public keys of an asymmetric cryptography system or symmetric keys of a symmetric cryptography system, for checking and/or verifying the digital signature (verification key) of the data field with the subsequent address to the end user (subscriber) have to be distributed and/or by only having to distribute cryptographic keys, for example private keys of an asymmetric cryptography system or symmetric keys of a symmetric cryptography system, for decrypting (decryption keys) the data field with the subsequent address to end users (subscribers). Advantageously, data can be provided in a decentralized manner, for example directly from a data generation device in the blockchain or in the distributed ledger. A data tap can advantageously be decentralized, for example directly from a recipient from the blockchain or the distributed ledger.

The data generation device is designed in particular as a sensor device with at least one sensor. Alternatively, however, other data generation devices such as simulation modules, data processing modules or the like are also conceivable. The sensor device is provided in particular to generate electronic data in the form of electronic sensor data in a sensor data generation step. The electronic data is in particular designed as continuous data (e.g. streaming data, such as a video stream and/or an audio stream) or as discontinuous data (e.g. as consecutive measurement points). The data transmission network is in particular at least partially in the form of a wireless data transmission network and/or at least partially in the form of a wired data transmission network. The data transmission network preferably comprises a plurality of data generation devices which each carry out data generation steps and provision steps. For example, the data transmission network can be in the form of an intranet or the Internet. A "data packet" is to be understood in particular as a self-contained data unit that a transmitter (e.g. the sensor device) transmits via the data transmission network. The data packet preferably has a defined shape and/or a defined size.

“Provided” should be understood to mean, in particular, specially programmed, designed and/or equipped. The fact that an object is provided for a specific function is to be understood in particular to mean that the object fulfills and/or executes this specific function in at least one application and/or operating state.

The fact that the data packets are written directly to the blockchain or directly to the distributed ledger is to be understood in particular as that when the data packets are sent, the data generation device establishes a direct connection to the blockchain or the distributed ledger, which is preferably free of a central data storage back-end, in particular a back-end of a client-server application, a back-end of a Database application and/or a back end of a content management system. The fact that the data packets are provided directly from the blockchain or directly from the distributed ledger should be understood in particular to mean that the recipients of the data packets establish a direct connection with the blockchain or the distributed ledger when the data packets are received, into which the data packets from the Data generation device were previously fed. In particular, the blockchain represents a special implementation of distributed ledger technology. In particular, the distributed ledger can be designed as a blockchain. A "blockchain" is to be understood in particular as a continuously expandable list of data records that are linked together using cryptographic methods, each of these data records comprising at least one cryptographically secure scatter value of the previous data record, a time stamp and transaction data. Each of the data packets provided preferably includes the data field with the reference to the subsequent address. In general, however, it is also conceivable that only every nth data packet has a data field with references to the next n data packets. The subsequent address specifies in particular a network address in the data transmission network, for example an Internet address, at which the data packet that follows the data packet will appear and can be downloaded. It is conceivable that the data field also includes a time specification that indicates when the data packet that follows the data packet will appear and can therefore be downloaded. A “data field” is to be understood in particular as a smallest unit, in particular a smallest analyzable unit, of a data set, in particular of a data packet. A "reference" is to be understood in particular as an electronic reference, for example a hyperlink or a web link. Advantageously, by using the Blockchain and / or the Distributed Ledger a high manipulation security of the data can be created. Decentralization can advantageously be achieved, in particular by using the distributed ledger and/or the blockchain.

A “digitally signed data field” is to be understood in particular as a data field that has been digitally signed by means of a symmetrical cryptosystem or by means of an asymmetric cryptosystem. In the asymmetric cryptosystem, a value (a digital signature) for the data field is calculated, in particular by the data generation device, preferably with the aid of a secret signature key (the private key) that is stored in particular in the data generation device. Any recipient who is in possession of the associated public verification key (the public key) can then use this value to check the non-repudiation of the authenticity and integrity of the reference to the subsequent address. In the symmetric cryptosystem, a value (a digital signature), in particular by the data generation device, is calculated for the data field, preferably with the aid of a key (also referred to below as a symmetric key). Any recipient who is in possession of the symmetric key can then use this value to check the non-repudiation of the authenticity and integrity of the reference to the subsequent address. An “encrypted data field” is to be understood in particular as a data field that has been digitally encrypted, in particular using the asymmetric cryptosystem or using the symmetric cryptosystem. Any recipient who is in possession of the associated private decryption key (the private key) when using the asymmetric cryptosystem or who is in possession of the symmetric key when using the symmetric cryptosystem can then use this to read the reference to the subsequent address from the data field. In particular, it is conceivable that, in addition to the data field with the reference to the subsequent address, further data fields or entire data packets are digitally signed and/or encrypted. It is also proposed that the electronic data be made available in the provision step via a subscriber channel, in particular an access-controlled one. As a result, a decentralized provision of data can advantageously be made possible. A central back end, in which the data is stored and via which the data is distributed, can advantageously be dispensed with. As a result, energy and/or computing resources can advantageously be saved. In addition, a risk of data manipulation (eg at the central storage location) can advantageously be significantly reduced as a result. In addition, costs can be saved by doing away with the central back end. In particular, an advantageous access control can also be made possible via a subscriber channel. A “subscriber channel” is to be understood in particular as a digital channel via which a regular purchase of electronic data generated by the data generation device and provided in the form of data packets is offered and/or processed. In particular, it is conceivable that available subscriber channels are displayed to a user via application software (app) on a digital device, such as a smartphone or a tablet. In this case, the app is only intended to make the subscriber channels findable, but does not itself offer any data records for download or the like. at. In particular, it is conceivable that a user can take out or cancel a subscription to the subscriber channel via the app. In particular, the subscriber channel is designed as an IOTA MAM (Masked Authenticated Messaging) channel, in particular as a "restricted" IOTA MAM channel, as an IOTA Streams channel or as a comparable subscriber channel. In particular, the data generating device forms a seed of the subscriber channel. In particular, the data generation device forms an IOTA seed of an IOTA MAM channel or an IOTA Streams channel. The subscriber channel can advantageously be disseminated publicly, for example via the app and/or via the Internet. In particular, the subscriber channel is directly associated with a particular data production device. In particular, the Subscriber Channel opened and/or managed by the owner of the data generating device via software of the data generating device. In particular, the respective data generation device can be geographically localized and found via the app.

Furthermore, it is proposed that the electronic data in the provision step be provided in real time or almost in real time, in particular worldwide. As a result, the electronic data can advantageously be particularly up-to-date. As a result, the electronic data can advantageously be used, for example, for efficient and/or effective, preferably direct, control of systems that receive and/or process the electronic data. The phrase "almost in real time" is to be understood in particular within less than 2 s, preferably less than 1 s and preferably less than 0.5 s. In particular, the delay between data generation by the data generation device and data reception by a recipient of the electronic data, which is a maximum of a few seconds, is mainly due to the duration of the data transmission and/or the necessary calculations for adding and/or removing the electronic data in/from the blockchain or the distributed ledger.

It is also proposed that a cryptographic key that is at least suitable for the encryption and/or the digital signature, in particular the decryption key and/or the verification key, is changed at regular or irregular time intervals, preferably in the one-, two- or three-digit minute range. As a result, a particularly high level of data security, in particular data access security and/or data authenticity security, can advantageously be achieved. For example, an owner of a key that has become invalid due to the key change can no longer verify or decrypt the electronic data that he receives from the subscriber channel after the key has become invalid. Preferably, the owner of the through the key change If the key has become invalid, the electronic data can no longer be found after the key has become invalid, since it can no longer identify subsequent addresses. In particular, the key (e.g. the public key or the symmetric key) used to encrypt the electronic data, in particular at least the data field with the reference to the subsequent address, preferably by the data generation device, changes at the same time interval as the decryption key and/or or the verification key. It is conceivable that the decryption key and the verification key are identical.

In addition, it is proposed that in a key provision step, at least the respective currently valid cryptographic key and at least suitable for the encryption and/or the digital signature of the encrypted and/or digitally signed data field of the currently provided data packet, in particular the respective currently valid and for verifying the digital signature of the digitally signed data field of the currently provided data packet matching verification key and / or the respective currently valid and suitable for decrypting the encrypted data field of the currently provided data packet decryption key, from a, in particular central, key provision system, preferably in real time or almost in real time, a the electronic data receiving subscriber system is provided. As a result, an advantageous verifiability of the electronic data and/or an advantageous access control of the electronic data can be made possible. A particularly high level of data security can advantageously be achieved. In particular, when the currently valid verification key and/or decryption key changes in real time or almost in real time, the new verification key and/or decryption key is provided. In particular, the new verification key and/or the new decryption key is sent to the subscriber system via the data transmission network. In particular, the new verification key and/or the new decryption key made available to all authorized subscriber systems. The key delivery system can be designed in particular as the app. It is also conceivable that access to the verification key and/or the decryption key is implemented using distributed identities (“decentralized identifiers”, DID) on a distributed ledger or a blockchain or a distributed storage system. In particular, the verification keys and/or the decryption keys are only made accessible to the owner of the DIDs using the cryptographic methods stored in the DIDs, for example stored encrypted with a public key assigned to the DID on a distributed ledger or a blockchain. In this case, the central key provision system could advantageously be dispensed with. In particular, the data generation device sends the currently valid verification key and/or encryption key to the app or to the operator of the app for distribution to the authorized subscriber systems. In particular, the app is mainly used, preferably only, to provide keys and to publish the subscriber channels in a searchable manner.

If at least the cryptographic key suitable for decrypting and/or for the digital signature of the encrypted and/or digitally signed data field of the currently provided data packet, in particular the respective currently valid verification key and/or suitable for verifying the digital signature of the digitally signed data field of the currently provided data packet and/or or the respective currently valid decryption key suitable for decrypting the encrypted data field of the currently provided data packet, from which, in particular, the central, key provision system is automatically transmitted to a subscriber system registered with the subscriber channel for a predefined limited period of time, a particularly advantageous access control can be made possible . A particularly high can be advantageous data security can be achieved. The predefined limited period of time preferably corresponds to a period of subscription to the subscriber channel by a subscriber system. For example, the predefined limited period of time includes one or more weeks, one or more months, or one or more years.

In addition, it is proposed that the electronic data, in particular at least the data fields of the data packets of the electronic data, which include the references to the subsequent addresses, and/or the entire data packets of the electronic data, should only come from the owners of a currently valid and for encryption and/or digital Signature of the encrypted and / or digitally signed data field of the currently provided data packet matching cryptographic key decryptable and / or verifiable. A particularly advantageous access control can thereby be made possible. A particularly high level of data security can advantageously be achieved.

If, in addition to the data fields with the references to the subsequent addresses, the rest of the data packets, in particular at least parts of all other data fields of the data packets, are also encrypted and/or digitally signed, particularly high data security and/or particularly advantageous access control can advantageously be made possible.

If, in addition, a further cryptographic key suitable for decrypting the remainders of the data packets, in particular at least parts of all further data fields of the data packets, and/or for verifying the content of the remainders of the data packets, in particular at least parts of all further data fields of the data packets, is used Decryption key and/or further verification key, different from the cryptographic key which is provided for decrypting the data fields which are assigned to the data packets and which contain the references to the subsequent addresses, in particular from the decryption key and/or from the verification key advantageously an even further increased data security can be achieved. Alternatively, however, it is also conceivable that the other data fields of the data packets can be decrypted using the same decryption key as the data field with the reference to the subsequent address and/or can be verified using the same verification key as the data field with the reference to the subsequent address.

It is also proposed that at least the data fields which are assigned to the data packets and which contain the references to the subsequent addresses, or the entire data packets, are encrypted and/or digitally signed by the data generation device in the data generation step. As a result, a particularly high level of data security, in particular protection against manipulation, can advantageously be achieved. In addition, a high level of energy efficiency can advantageously be achieved, in particular by the electronic data already being bundled and digitally signed/encrypted on the data generation device, instead of each individual measurement point being sent separately to an external unit. In particular, the data generation device has a data processing unit with an encryption and/or signature module, which is intended to generate, digitally sign and/or encrypt the data fields that are assigned to the data packets and that contain the references to the subsequent addresses. In particular, the data processing unit comprises at least one symmetrical key or at least one public key/private key pair, preferably several public key/private key pairs, which are rotated periodically or aperiodically.

In addition, it is proposed that the data generation device is in the form of the sensor device with the sensor and/or that the electronic data is in the form of sensor data. As a result, a high level of data security for sensor data can advantageously be achieved, in particular with regard to verifying the authenticity of data packets provided in succession with the sensor data and/or with regard to a Access control to the successively provided data packets with the

sensor data. Advantageously, this can be a decentralized

Data provision infrastructure for sensor data can be made possible.

It is also proposed that in a key generation step, the cryptographic key that is at least suitable for the encryption and/or for the digital signature of the encrypted and/or digitally signed data field of the data packet, in particular in regular or irregular, preferably in the one-, two- or three-digit minute range, Time intervals, is generated close to the sensor and is transmitted to the, in particular central, key provision system, in particular in the regular or irregular time intervals, preferably lying in the one-, two- or three-digit minute range. As a result, a high, in particular cryptographic, data security can advantageously be achieved. A particularly independent system with a particularly lean back end can advantageously be made possible. Alternatively, it is conceivable that a cryptographic key suitable for the encryption and/or digital signature of the encrypted and/or digitally signed data field of the data packet is alternately selected from a plurality of cryptographic keys preinstalled on the data generation device and transmitted to the key provision system. The phrase "close to the sensor" should be understood in particular directly on the sensor or on a system closely linked to the sensor and arranged in the vicinity of the sensor, for example a local data transmission station such as a LoRaWAN gateway.

In addition, it is proposed that at least one consensus protocol for feeding into the blockchain or into the distributed ledger, for example a Proof-of-Work (PoW), a Proof-of-Stake (PoS), in particular an election-based and/ or a leader-based consensus protocol, such as a Delegated Proof of Stake (DPoS) or a Raft Algorithm, or the like, from the data generation device, in particular close to the sensor, or from one of the Data generation device different, in particular sensor-external, data forwarding system of the data transmission network is performed. As a result, an at least largely decentralized data provision infrastructure can advantageously be made possible. Advantageously, a data provision method that is at least essentially independent of central control stations or back-ends can be made possible. A high level of data security, in particular against manipulation, can advantageously be achieved as a result. A particularly high level of energy, resource and/or cost efficiency can advantageously be achieved as a result. In particular, it is conceivable that requirements for a necessary effort for a consensus protocol to be completed, for example for a proof of work, are made dependent on a reputation procedure. In particular, the requirement for the necessary outlay for the consensus protocol to be completed could be made dependent on a participation history, in particular the data generation device and/or the data forwarding system, in the data transmission network. In particular, the requirement for the necessary outlay for the consensus protocol to be completed could be made dependent on an activity, in particular the data generation device and/or the data forwarding system, in the data transmission network. In particular, the requirement for the necessary outlay for the consensus protocol to be completed could be made dependent on the number and/or types of crypto values held, in particular by the data generation device and/or by the data forwarding system. In particular, the requirement for the necessary outlay for the consensus protocol to be completed, in particular by the data generation device and/or by the data forwarding system, could be made dependent on a current load on the data transmission network. The data transmission system of the data transmission network is in particular designed as a local gateway, for example as a LoRaWAN gateway, which is intended to collect and forward (low-energy) signals from sensors distributed locally over an area, preferably to the forward part of the data transmission network to which the subscriber system can gain access. The data forwarding system is preferably arranged at a distance of a few kilometers, preferably a few hundred meters, from the data generation device. In particular, the data forwarding system is explicitly assigned to at least one data generation device. In particular, the data transmission network comprises a plurality of data forwarding systems which are each associated with different data generation systems, preferably arranged in different regions.

In this context it is further proposed that the data forwarding system different from the data generating device is different and separate from a back-end, in particular different and separate from a back-end of a client-server application, a back-end of a database application and/or a back end of a content management system, and preferably different and separate from a control center. As a result, an at least largely decentralized data provision infrastructure can advantageously be made possible. A particularly lean data provision infrastructure can advantageously be made possible. A high level of data security, in particular protection against manipulation, can advantageously be achieved. The data provision method is preferably at least essentially free of a back end, in particular a data storage back end. If a back end is provided within the data provision method, the back end is limited to administration and/or transmission of the cryptographic keys, to administration of user accounts that can be registered with the subscriber channel and/or to a geographic search and/or or displaying positions of subscribable data generating devices.

In addition, it is proposed that an automatic purchase of the electronic

Data through the subscriber system, preferably a subscription to

Subscriber channel through the subscriber system, automatically terminated when the subsequent address contained in a received data packet, in particular the data field contained in a received data packet with the reference to the subsequent address, cannot be decrypted with a cryptographic key currently available to the subscriber system, in particular with the decryption key. A particularly advantageous access control can be achieved in this way. A particularly simple access control can advantageously be achieved. A particularly comprehensive control over the data streams transmitted via the data transmission network can advantageously be achieved.

If, as an alternative or in addition, an automatic verification of the received electronic data of a data stream, in particular by the subscriber system, preferably an assignment of a certificate of authenticity to the received data by the subscriber system, is set if the digital signature of a data field contained in one of the received data packets, in particular the Data field with the subsequent address can be unverified with a cryptographic key currently available to the subscriber system, in particular the verification key, an advantageously high security against forgery and/or manipulation can be achieved. In particular, the automatic acquisition of the electronic data by the subscriber system, preferably a subscription to the subscriber channel by the subscriber system, is automatically terminated if the data field contained in a received data packet with the reference to the subsequent address has a verification key currently available to the subscriber system is unverifiable. A warning message is preferably output by the subscriber system if a received data packet cannot be verified. In the case of an unverifiability of data packets in a data stream, the data stream, in particular the chain of data packets, would remain publicly receivable and/or readable (especially if there is no additional encryption of the data packets or individual data fields of the data packets, since the subsequent address is then stored in plain text) , it however, there is no possibility of proving the origin and/or authenticity of the data and/or integrity and/or completeness of the data stream beyond any doubt.

In addition, it is proposed that, in a payment step, upon receipt of a data packet, preferably upon each receipt of an individual data packet of a data stream, a digital payment, in particular a digital micropayment, to an address associated with the data generation device or to an address contained, for example, in the digital data Owner address, in particular the data generation device, is triggered. As a result, direct payment to a data generator, in particular to an owner of the data generation device, can advantageously be made possible. Advantageously, this means that there is no need for an intermediary, for example a provider of a data storage back end. Advantageously, this means that the back end can generally be dispensed with. In this way, self-amortization of the data generation device can advantageously be made possible. A particularly exact payment can advantageously be made possible. A micropayment is to be understood in particular as a payment in the amount of a fraction of the smallest currency unit common in an economic area. For example, in the euro area, a sum below €0.01 should be understood as a micropayment. For example, for the receipt of a data packet, in particular a measured value of the sensor, payment of an amount of one or more hundredths of a euro cent or one or more thousandths of a euro cent is triggered to the address associated with the data generation device or to the owner address. The payment is preferably made in the form of a micropayment-compatible cryptocurrency, such as IOTA.

It is also proposed that the sensor be designed as an agricultural sensor, in particular a stationary one. As a result, agricultural sensor data can advantageously be made available in real time or almost in real time. In this way, for example, a timely and/or targeted reaction to transmitted measured values in the agricultural sector can advantageously be made possible.

Alternatively or additionally, it is proposed that the sensor be designed as an infrastructure sensor, in particular as a traffic control sensor. This advantageously allows traffic sensor data to be provided in real time or almost in real time. This can advantageously enable, for example, a timely and/or targeted reaction to measured values transmitted in the traffic sector.

In addition, a sensor network, which is provided for carrying out the data provision method, is proposed with one or more data generation device(s) designed as a sensor device. A high level of data security can advantageously be achieved as a result, in particular with regard to verification of an authenticity of data packets provided in succession and/or with regard to access control to the data packets provided in succession. In addition, a decentralized data provision infrastructure can advantageously be made possible. A sensor network is to be understood in particular as a computer network of sensor devices, preferably computers communicating by radio, which work together either in an infrastructure-based network (keyword: gateway) or in a self-organizing ad hoc network in order to use the Query sensors and forward the information. For this purpose, the sensor network preferably comprises one or more sensor(s) generating the sensor data, the data transmission network for external provision of the sensor data, and an access control system which is intended for the subscriber channel to directly obtain the sensor data from the sensor(s). /s publicly available, and at least the subscriber system registered with the subscriber channel and obtaining the sensor data directly from the sensor(s). The access control system is in particular as a smartphone, as a tablet or as another personal Computer formed on which at least the app is installed, preferably pre-installed.

In addition, the sensor, in particular the agricultural sensor or the infrastructure sensor, is proposed for the sensor network.

The data provision method according to the invention, the sensor network according to the invention and/or the sensor according to the invention should not be limited to the application and embodiment described above. In particular, the data provision method according to the invention, the sensor network according to the invention and/or the sensor according to the invention can have a number of individual method steps, elements, components and units that differs from a number specified here in order to fulfill a functionality described herein.

drawings

Further advantages result from the following description of the drawing. In the drawings an embodiment of the invention is shown. The drawings, the description and the claims contain numerous features in combination. The person skilled in the art will expediently also consider the features individually and combine them into further meaningful combinations.

Show it:

1 shows a schematic representation of a sensor network with a plurality of data generation devices,

2 shows a schematic representation of the electronic data generated by the data generation devices and

3 shows a schematic flowchart of a data provision method running via the sensor network. Description of the embodiment

1 shows a schematic representation of a sensor network 42. The sensor network 42 comprises a plurality of data generation devices 12. The data generation devices 12 are in the form of sensor devices. Each of the data generating devices 12 comprises at least one sensor 34, 34', 44, 44', 46, 46'. The sensors 34, 34′, 44, 44′, 46, 46′ shown in FIG. 1 are embodied, for example, as stationary agricultural sensors arranged distributed over an agriculturally used area. Alternatively, the sensors 34, 34′, 44, 44′, 46, 46′ could be designed as mobile agricultural sensors, as infrastructure sensors (not shown), such as traffic control sensors, or as any other sensors in a sensor network 42 . The sensors 34, 34', 44, 44', 46, 46' can be used, inter alia, as optical sensors (e.g. camera sensors, radar sensors, etc.), as acoustic sensors (e.g. microphones), as environmental condition sensors (e.g. temperature sensors, humidity sensors, air pressure sensors, Rainfall sensors, wind speed sensors, wind direction sensors, soil moisture sensors, fog density sensors, traffic counter sensors, etc.) or as any other sensors that record at least one physical parameter. The data generation devices 12 each include a radio module 50 which is intended to send electronic data and/or to receive electronic data. The radio module 50 is embodied as a LoRa radio module, for example. However, data transmission via alternative data transmission protocols, such as mobile radio protocols (GSM, etc.), is of course also conceivable. The sensor network 42 forms a data transmission network 16 . The data generating devices 12 form part of the data transmission network 16 . The data transmission network 16 is provided for external provision of the electronic data. In the example described here, the electronic data is embodied as sensor data. The data transmission network 16 comprises data forwarding systems 38, 38'. The data forwarding systems 38, 38' are designed as LoRaWAN gateways. The data forwarding systems 38, 38' are distinct and separate from the data generating devices 12. The data forwarding systems 38, 38' are different and separate from a back-end in which the electronic data is temporarily stored. A plurality of data generation devices 12 is assigned to a data forwarding system 38, 38'. The data forwarding systems 38, 38' each include a radio module 50 which is intended to send electronic data and/or to receive electronic data. The data forwarding system 38, 38' is intended to feed the electronic data from the data generation devices 12 arranged in the immediate vicinity (a few kilometers) of the respective data forwarding system 38, 38' into the Internet. The data forwarding systems 38, 38' are intended to write the electronic data from the data generation devices 12 located in the immediate vicinity (a few kilometers) of the respective data forwarding system 38, 38' into a blockchain or into a distributed ledger 52 (cf. arrow 98). Alternatively, the data generation devices 12 can be designed independently of data forwarding systems 38, 38' and write the electronic data directly into the blockchain or into the distributed ledger 52 (cf. arrow 100).

The sensor network 42 has an access control system 48 . The access control system 48 is designed as an app. Via the access control system 48 a geographical position of the respective data generating devices 12 can be found. The geographical positions of the data generating devices 12 can be called up via the access control system 48 . The access control system 48 is intended to make a subscriber channel 24 publicly available for direct acquisition of the sensor data from the sensors 34, 34', 44, 44', 46, 46' do. The sensor network 42 is connected to a subscriber system 30 via the access control system 48 . Subscriber system 30 is designed as a smartphone in the example shown in FIG. 1 . Subscriber system 30 is intended to receive, display and/or evaluate the electronic data. The recipient system 30 is intended to obtain the electronic data via the blockchain or the distributed ledger 52 directly from the sensors 34, 34', 44, 44', 46, 46'. The subscriber system 30 is registerable with the subscriber channel 24 by means of the access control system 48 . The subscriber system 30 obtains the electronic data through the subscriber channel 24. Each subscriber channel 24 is associated with one or more data generating devices 12 and/or data routing systems 38, 38'. Each subscriber channel 24 only enables the electronic data to be obtained which are provided by data generation devices 12 and/or data forwarding systems 38, 38' which are explicitly assigned to the respective subscriber channel 24. The data generation devices 12 are provided for generating the electronic data shown schematically in FIG. 2 . The sensor network 42 is provided for carrying out a data provision method shown in FIG. 3 .

The sensor network 42 communicates with a central key provision system 28. The key provision system 28 can also be integrated into the sensor network 42. The key provision system 28 is intended to receive cryptographic keys, in particular public keys, private keys or symmetric keys, preferably decryption keys or verification keys, from the data generation devices 12 and/or from the data forwarding systems 38, 38'. The key provision system 28 is provided to the cryptographic key, in particular the public key, the private key or the symmetric key, preferably the decryption key or the save the verification key. The key provision system 28 is intended to transmit cryptographic keys, in particular public keys, private keys or symmetric keys, preferably decryption keys or verification keys, from subscriber systems 30 to subscriber systems 30, in particular to subscriber systems 30 registered with a subscriber channel 24 . The key delivery system 28 transmits the cryptographic keys, in particular public keys, private keys or symmetric keys, preferably decryption keys or verification keys, exclusively to active subscribers of a subscriber channel 24. The key delivery system 28 only transmits the cryptographic keys, in particular public keys, private keys or symmetric keys Keys, preferably decryption keys or verification keys, associated with the data generating devices 12 and/or with the data forwarding systems 38, 38' of the respective subscriber channel 24. The key provision system 28 is designed as a central server with memory and processor. Alternatively, the key provision system 28 could be designed as a distributed server or implemented decentrally via the blockchain or the distributed ledger 52 using DIDs.

FIG. 2 shows a schematic representation of the electronic data generated by the data generation devices 12 . The electronic data are embodied as electronic data sets and/or as electronic data streams 62, each of which includes data packets 18, 22. The data packets 18, 22 are sequential in time, have a finite size and have a uniform structure. Each data packet 18, 22 includes one or more data fields 56, 56', 58, 58', 60, 60' with user data (eg the measured sensor data). Each data packet 18, 22 includes a data field 20, 20' with a reference to a subsequent address. The subsequent address can be determined randomly or quasi-randomly. The subsequent address indicates the location (link) at which the next data packet 22 following a data packet 18 can be found or will be found, in particular where or how the next data packet 22 can be downloaded from the blockchain or from the distributed ledger 52. The data field 20, 20' with the subsequent address is encrypted and digitally signed. Alternatively, it is also conceivable that the data field 20, 20' with the subsequent address is only encrypted but not digitally signed, or is only digitally signed but not encrypted. In addition to the data fields 20, 20' with the references to the subsequent addresses, a remainder 32 of the data packets 18, 22 is also encrypted and/or digitally signed. The data fields 20, 20' with the references to the subsequent addresses and/or the remainders 32 of the data packets 18, 22 are digitally signed and/or encrypted by the data generation devices 12. The data generation devices 12 each include internal data processing units (not shown) with at least one data memory and with at least one processor. The internal data processing units of the data generation devices 12 include an operating program which the processor can call up from the memory unit and which is intended to encrypt and/or encrypt the data fields 20, 20' with the references to the subsequent addresses and/or also the remainders 32 of the data packets 18, 22 or digitally signed.

3 shows a schematic flow chart of the data provision method. The data provision method includes a data generation step 10. In the data generation step 10, the electronic data are generated by the data generation devices 12 on the basis of the measurements of the sensors 34, 34', 44, 44', 46, 46'. In data generation step 10, a detection signal is converted by the internal data processing unit of data generation devices 12 into an electronic data set comprising data packets 18, 22 (cf. FIG. 2) and/or into an electronic data stream 62 comprising data packets 18, 22. In a cryptography step 72, the data packets 18, 22 are encrypted and/or digitally signed by the data generation device 12. In at least one partial step 74 of the cryptography step 72, the data fields 20, 20' with the references to the subsequent addresses of the data packets 18, 22 with a key (eg a public key or a symmetric key) of the data generation device 12 encrypted. In at least one partial step 76 of the cryptography step 72, the data fields 20, 20' with the references to the subsequent addresses of the data packets 18, 22 are digitally signed with a key (e.g. a private key or a symmetric key) of the data generation device 12. The encryption key and the digital signature key can be the same or different. In at least one partial step 78 of the cryptography step 72, the remainders 32 of the data packets 18, 22 are encrypted with a key (for example with a public key or with a symmetric key) of the data generation device 12. In at least one partial step 80 of the cryptography step 72, the remainders 32 of the data packets 18, 22 are digitally signed with a key (for example with a private key or with a symmetric key) of the data generation device 12. The keys used for the encryption for the digital signature can in turn be identical to or different from one another and/or identical or different to those for the encryption and the digital signature of the data fields 20, 20' with the subsequent addresses. The electronic data encrypted and/or signed in this way can only be decrypted and/or or verifiable.

In at least one further cryptography step 82, the cryptographic keys that match the currently generated data packets 18, 22 are changed at regular or irregular time intervals, preferably in the one-, two- or three-digit minute range. For example, the cryptographic keys that match the currently generated data packets 18, 22 are changed at 10-minute intervals. In a sub-step 84 of the further cryptography step 82, the encryption of the data field 20, 20 'with the subsequent address of the data packet 18, 22 that is currently being generated, in particular the decryption key, for the data field 20, 20' with the subsequent address is changed at regular or irregular time intervals, preferably in the one-, two- or three-digit minute range. In a further sub-step 86 of the further cryptography step 82, the cryptographic key that matches the digital signature of the data field 20, 20' with the subsequent address of the currently generated data packet 18, 22, in particular the verification key, for the data field 20, 20' with the subsequent address is sent at regular intervals or irregular time intervals, preferably in the one-, two- or three-digit minute range. In a further sub-step 88 of the further cryptography step 82, the cryptographic key suitable for encrypting the remainder 32 of the data packet 18, 22 currently being generated, in particular the decryption key for the remainder 32 of the data packet 18, 22 currently being generated, is encrypted at regular or irregular intervals, preferably in one -, two- or three-digit minute range, time intervals changed. In a further sub-step 90 of the further cryptography step 82, the cryptographic key matching the digital signature of the remainder 32 of the data packet 18, 22 currently being generated, in particular the verification key for the remainder 32 of the data packet 18, 22 currently being generated, is transferred at regular or irregular intervals, preferably in one-, two- or three-digit minute range, time intervals changed.

In at least one provision step 14, the electronic data are provided in the form of data packets 18, 22 via the data transmission network 16. In a sub-step 54 of the provision step 14, the data packets 18, 22 are written directly into the blockchain or into the distributed ledger 52 via the data transmission network 16. In a further partial step 70 of the provision step 14, at least one consensus protocol for feeding into the blockchain or into the distributed ledger 52 is carried out by the data generation device 12. In another to that Sub-step 70 alternative sub-step 94 of the provision step 14, the consensus protocol for feeding into the blockchain or into the distributed ledger 52 is carried out by the data transmission system 38, 38′ of the data transmission network 16, which is different from the data generating device 12 and is external to the sensor.

In a further partial step 64 of the provision step 14, the electronic data are provided via the subscriber channel 24 (cf. FIG. 1). Subscriber channel 24 may be access controlled. For example, it is conceivable that the subscriber channel 24 can only be subscribed to by paying a sum of money, only after being linked to a payment system (e.g. with a crypto wallet) or only after entering certain data (e.g. name and address), etc. In at least one further sub-step 68 of the provision step 14 , the subscriber system 30 is registered with the subscriber channel 24 by a user to obtain the electronic data from the data generation devices 12 linked to the subscriber channel 24 .

In a further sub-step 66 of the provision step 14, the data packets 18, 22 are provided via the data transmission network 16 directly from the blockchain or the distributed ledger 52 for retrieval by the subscriber system 30. The data packets 18, 22 can thus be called up and/or downloaded for the subscriber systems 30 directly from the blockchain or directly from the distributed ledger 52. The electronic data is provided in the providing step 14 via the subscriber channel 24 in real time or near real time.

In a key generation step 36, the cryptographic keys suitable for the encryption and/or for the digital signature of the data fields 20, 20', 56, 56', 58, 58', 60, 60' of the data packet 18, 22 are provided close to the sensor, in particular by the data generation devices 12 or generated by the data forwarding systems 38, 38'. In the key generation step 36, the encryption and / or digital signature of the Data fields 20, 20′, 56, 56′, 58, 58′, 60, 60′ of the data packet 18, 22 are transmitted to the key provision system 28 with the appropriate cryptographic key.

In a key preparation step 26, the currently valid cryptographic keys that match the encryptions and/or the digital signatures of the data fields 20, 20', 56, 56', 58, 58', 60, 60' of the data packet 18, 22 are in particular the appropriate decryption key and/or the appropriate verification key, provided by the key provision system 28 to the subscriber system 30 receiving the electronic data. The respective matching cryptographic keys are provided to the subscriber system 30 in the key provision step 26 in real time or almost in real time. The cryptographic keys suitable for the encryption and/or for the digital signature of the data fields 20, 20', 56, 56', 58, 58', 60, 60' of the currently provided data packet 18, 22 are automatically provided by the key provision system 28 in the key provision step 26 transmitted to the subscriber system 30 registered with the subscriber channel 24 for a predefined limited period of time. The predefined limited period of time corresponds to the period of time in which the data fields 20, 20', 56, 56', 58, 58', 60, 60' of the generated data packets 18, 22 have a matching key (e.g. a public key, a private key or a symmetric key) encrypted or digitally signed. In a further key preparation step 92 following the key preparation step 26, if the cryptographic key required and/or suitable for decrypting or verifying the currently provided data packet 18, 22 is changed in the further cryptography step 82, the changed, now suitable cryptographic key is transferred to the one in the subscriber -Channel 24 registered subscriber system 30 transmitted. In at least one further method step 96, a subscription to the subscriber channel 24 is terminated by a user of the subscriber system 30. In this case, when a cryptographic key that matches at least one data field 20, 20′, 56, 56′, 58, 58′, 60, 60′ of the data packet 18, 22 changes, no new, changed key is transmitted to the subscriber system 30 . The further key provision step 92 is therefore no longer carried out for this subscriber system 30 . The automatic reference to the electronic data by the subscriber system 30, ie the subscription to the subscriber channel 24 by the subscriber system 30, is automatically terminated when the subsequent address contained in a received data packet 18, 22 with a cryptographic key currently available to the subscriber system 30 is undecipherable. In this case, the further data packets 18, 22 can no longer be found by the subscriber system 30 due to the lack of information on the subsequent addresses. Even if the current cryptographic key is later reset to a previously valid cryptographic key, the subscription remains inactive. In addition, the automatic verification of the received electronic data of a data stream 62 is set if the digital signature of at least one of the received data packets 18, 22 contained data fields 20, 20 ', 56, 56', 58, 58', 60, 60 'with a cryptographic key currently available to the subscriber system 30 is unverifiable. In this case, the further data packets 18, 22, insofar as the data fields 20, 20' with the subsequent addresses are not additionally encrypted, can still be found for the subscriber system 30, but the subscriber system 30 cannot trust this electronic data any further, since no Verification of the data packets 18, 22 is more possible.

In a compensation step 40, upon receipt of each of the data packets 18, 22, digital compensation is triggered at an address associated with the data generation device 12 or at an owner address of the data generation device 12. The digital remuneration takes place in form of digital micropayments. The digital payment is made in a cryptocurrency.

An exemplary remuneration process is described below. First, a price for a measured value and/or for a data packet 18, 22 is stored on the data generation device 12. For example, a measured temperature value of a data generation device 12 designed as an agricultural sensor, which is determined every two minutes, costs €0.0001. If a subscriber now makes a selection via the access control system 48 and, for example, buys temperature data for 60 minutes from 1000 distributed data generation devices 12, which have different owners (private individuals, companies, etc.), or his subscriber system 30 from the data generation devices 12 associated subscriber channels 24 registered, this costs him 0.10 € every two minutes, ie a total of 3 €. At least a part of the 3 € is distributed in increments (0.10 € every 2 minutes) directly from the subscriber to the owners (owner addresses) of the 1000 distributed data generating devices 12 . It is conceivable that part of the €3 is transferred to the access control system 48 (the app) for making the subscriber channels 24 publicly available. In return, the subscriber receives for 60 minutes the respectively valid cryptographic key that matches the electronic data of the 1000 distributed data generation devices 12 from the key provision system 28 . At the end of the 60 minutes, the subscriber no longer receives any updates to the cryptographic key, so that the subscription to the electronic data ends automatically, since the subscriber system 30 can no longer determine the subsequent addresses of the further data packets. A simple total bill (eg for all subscriptions together) can advantageously be issued to the subscriber via the access control system 48 (the app). Accurate billing may advantageously be provided to the owners of the data generating devices 12 via the access control system 48 (the app). At the same time, any number of other recipients can also obtain the electronic data from the 1000 distributed data generation devices 12 or at least from some of these data generation devices 12, in particular without an increased load on the part of the data generation devices 12 being generated as a result. Advantageously, the recipient and the owner of the data generation devices 12 do not have to know each other. The recipient and an operator of the key provision system 28 or of the access control system 48 (of the app) advantageously do not have to know each other. The owners of the data generation devices 12 and an operator of the key provision system 28 or the access control system 48 (the app) advantageously do not have to know each other. In addition, no contracts are advantageously required between the owners of the data generating devices 12 and the subscribers. Only an agreement regarding the use of the access control system 48 has to be approved by the subscriber and/or by the owners of the data generating devices 12 .

Reference sign

10 data generation step

12 data generation device

14 Deployment Step

16 data transmission network

18 data packet

20 data field

22 data packet

24 subscriber channel

26 key deployment step

28 Key Delivery System

30 subscriber system

32 remainder

34 sensors

36 key generation step

38 data forwarding system

40 compensation step

42 sensor network

44 sensors

46 sensors

48 access control system

50 radio module

52 Blockchain or distributed ledgers

54 substep

56 data field

58 data field

60 data field

62 data stream

64 substep

66 partial step substep

substep

cryptographic step

substep

cryptographic step

substep

key deployment step

substep

process step

Arrow

Claims

Claims Data provision method, with a data generation step (10) in which electronic data is generated by at least one data generation device (12), and with a provision step (14) in which the electronic data is transmitted via a data transmission network (16) in the form of data packets (18, 22) are provided, wherein in the providing step (14) the data packets (18, 22) are first written, preferably directly, into a blockchain or in a distributed ledger (52) and wherein in the providing step (14) via the data transmission network (16 ) the data packets (18, 22) are provided, preferably directly, from the blockchain or from the distributed ledger (52), characterized in that provided data packets (18) contain at least one encrypted and/or digitally signed data field (20, 20') with a reference to a, in particular random or quasi-random, subsequent address of the data packet (18) following next th data packet (22) include. Data provision method according to Claim 1, characterized in that the electronic data are provided in the provision step (14) via a subscriber channel (24), in particular an access-controlled one.

3. Data provision method according to claim 1 or 2, characterized in that the electronic data in the provision step (14) are provided in real time or almost in real time.

4. Data provision method according to one of the preceding claims, characterized in that a cryptographic key suitable at least for the encryption and/or the digital signature is changed at regular or irregular time intervals, preferably in the one-, two- or three-digit minute range.

5. Data provision method according to one of the preceding claims, characterized in that in a key provision step (26) at least the respective currently valid and at least for the encryption and/or for the digital signature of the encrypted and/or digitally signed data field (20, 20') cryptographic keys matching the data packet (18, 22) currently provided are provided by a, in particular central, key provision system (28), preferably in real time or almost in real time, to a subscriber system (30) receiving the electronic data.

Data provision method according to Claim 2, characterized in that at least the cryptographic key suitable for the encryption and/or for the digital signature of the encrypted and/or digitally signed data field (20, 20') of the currently provided data packet (18, 22) is obtained from one, in particular central , Key provision system (28) is automatically transmitted to a subscriber system (30) registered with the subscriber channel (24) for a predefined limited period of time. Data provision method according to one of the preceding claims, characterized in that the electronic data are provided exclusively by owners of a currently valid data field (20, 20') of the currently provided data packet (18, 22) can be decrypted and/or verified using a suitable cryptographic key. Data provision method according to one of the preceding claims, characterized in that in addition to the data fields (20, 20') with the references to the subsequent addresses, the remainder (32) of the data packets (18, 22) are also encrypted and/or digitally signed.

Data provision method according to Claim 8, characterized in that a further cryptographic key suitable for decrypting the remainders (32) of the data packets (18, 22) and/or for verifying the content of the remainders (32) of the data packets (18, 22) is different from a cryptographic key which is provided for decrypting the data fields (20, 20') which are assigned to the data packets (18, 22) and which contain the references to the subsequent addresses. Data provision method according to one of the preceding claims, in particular according to claim 8 or 9, characterized in that at least the data fields (20, 20 '), which are assigned to the data packets (18, 22) and which contain the references to the subsequent addresses, or the entire Data packets (18, 22) are encrypted and/or digitally signed in the data generation step (10) by the data generation device (12). Data provision method according to one of the preceding claims, characterized in that the data generation device (12) is designed as a sensor device with a sensor (34, 34') and/or that the electronic data is designed as sensor data. Data provision method according to Claim 11, characterized in that in a key generation step (36) the cryptographic key suitable at least for the encryption and/or for the digital signature of the encrypted and/or digitally signed data field (20, 20') of the data packet (18, 22) is close to the sensor is generated and transmitted to the key supply system (28). Data provision method according to one of the preceding claims, in particular according to claim 11, characterized in that at least one consensus protocol for feeding into the blockchain or into the distributed ledger (52) is carried out by the data generation device (12). Data provision method according to one of claims 1 to 12, in particular according to claim 11, characterized in that at least one consensus protocol for feeding into the blockchain or into the distributed ledger (52) is different from the data generation device (12), in particular sensor-external, Data forwarding system (38, 38 ') of the data transmission network (16) is performed. Data provision method according to Claim 14, characterized in that the data forwarding system (38, 38') which is different from the data generating device (12) is designed differently and separately from a back end. Data provision method according to Claim 6, characterized in that an automatic purchase of the electronic data by the subscriber system (30), preferably a subscription to the subscriber channel (24) by the subscriber system (30), is automatically terminated when the data contained in a received data packet ( 18, 22) contained subsequent address is undecryptable with a cryptographic key currently available to the subscriber system (30).

17. Data provision method according to claim 6, characterized in that an automatic verification of the received electronic data of a data stream (62) is set if the digital signature of a data field (20, 20', 56 , 56', 58, 58', 60, 60') with a cryptographic key currently available to the subscriber system (30).

18. Data provision method according to one of the preceding claims, characterized in that in a remuneration step (40) when a data packet (18, 22) is received, digital remuneration, in particular a digital micropayment, is sent to an address associated with the data generation device (12) or to a owner address is triggered.

19. Data provision method according to claim 11, characterized in that the sensor (34, 34') is designed as an, in particular stationary, agricultural sensor.

20. Data provision method according to claim 11, characterized in that the sensor (34, 34') is designed as an infrastructure sensor, in particular as a traffic control sensor.

21 . Sensor network (42), which is provided for carrying out the data provision method according to one of the preceding claims, with one or more data generation devices (12) designed as sensor devices. Sensor network (42) according to claim 21, with one or more sensor data generating sensor / s (34, 34 ', 44, 44', 46, 46'), with a data transmission network (16) for an external provision of the sensor data, with an access control system (48), which is intended to make a subscriber channel (24) publicly available for direct reference to the sensor data from the sensor(s) (34, 34', 44, 44', 46, 46'), and at least one subscriber system (30) registered with the subscriber channel (24) and obtaining the sensor data directly from the sensor(s) (34, 34', 44, 44', 46, 46'). Sensor (34, 34', 44, 44', 46, 46'), in particular agricultural sensor or infrastructure sensor, for a sensor network (42) according to one of Claims 21 or 22.