Method, security device and security system

1. A method for generating an apparatus-specific apparatus certificate for an apparatus, comprising:

coupling a security device to the apparatus, a one-time useable private signing key being stored in the security device;

storing apparatus-specific identification information in the security device;

accessing the private signing key in the security device;

generating the apparatus-specific apparatus certificate depending on the stored apparatus-specific identification information in the security device, the apparatus-specific apparatus certificate being signed using the private signing key;

preventing a further access to the private signing key;

generating an apparatus key pair comprising a public and a private apparatus key;

storing the private apparatus key in a key storage device of the apparatus; and

incorporating the public apparatus key in the apparatus certificate while generating the apparatus certificate.

2. The method as claimed in claim 1 , wherein preventing the further access to the private signing key comprises at least one of (i) erasing the private signing key, (ii) overwriting the private signing key, (iii) altering the private signing key and (iv) blocking an access to a key storage device in which the private signing key is stored.

3. The method as claimed in claim 1 , wherein signing keys stored in a plurality of different security devices are identical.

4. The method as claimed in claim 2 , wherein signing keys stored in a plurality of different security devices are identical.

5. The method as claimed in claim 1 , further comprising:

one of:

(i) receiving the apparatus-specific identification information from the apparatus or via an interface of the apparatus in the security device; and

(ii) generating the apparatus-specific identification information in the security device.

6. The method as claimed in claim 1 , further comprising: in the security device,

checking in the security device whether the stored identification information is stored in a predefined data format; and

generating in the security device the apparatus-specific apparatus certificate if the stored identification information is stored in the predefined data format.

7. The method as claimed in claim 1 , further comprising:

receiving release information in the security device;

checking in the security device whether the release information corresponds to predefined release information; and

generating in the security device the apparatus-specific apparatus certificate if the release information corresponds to the predefined release information.

8. The method as claimed in claim 1 , wherein the apparatus-specific identification information contains a serial number of the apparatus.

9. The method as claimed in claim 1 , wherein the apparatus certificate contains at least one of (i) the identification information, (ii) the serial number of the apparatus, (iii) information about a manufacturer of the apparatus, (iv) information about a version of the apparatus, (v) a certificate creation date and (vi) the private apparatus key.

10. The method as claimed in claim 1 , wherein the apparatus certificate is generated in a predefined certificate format.

11. A security device which is configured to generate an apparatus-specific apparatus certificate for an apparatus coupled to the security device, comprising:

a key storage device for storing a one-time useable private signing key;

an identification information storage device for storing apparatus-specific identification information; and

a certificate generating device for generating the apparatus certificate depending on the stored identification information and for signing the apparatus certificate using the private signing key read out from the key storage device;

wherein the security device is configured to:

generate an apparatus key pair comprising a public and a private apparatus key;

store the private apparatus key in a key storage device of the apparatus;

incorporate the public apparatus key in the apparatus certificate while generating the apparatus certificate; and

prevent a further access to the private signing key.

12. The security device as claimed in claim 11 , the security device being further configured to:

access the private signing key in the security device; and

generate the apparatus-specific apparatus certificate depending on the stored apparatus-specific identification information in the security device, the apparatus-specific apparatus certificate being signed using the private signing key.

13. A security system comprising:

a security device which is configured to generate an apparatus-specific apparatus certificate, the security device comprising:

a key storage device for storing a one-time useable private signing key;

an identification information storage device for storing apparatus-specific identification information; and

a certificate generating device for generating the apparatus certificate depending on the stored identification information and for signing the apparatus certificate using the private signing key read out from the key storage device; and

an apparatus which is configured to be coupled to the security device and which receives the apparatus-specific apparatus certificate;

wherein the security device is configured to:

generate an apparatus key pair comprising a public and a private apparatus key;

store the private apparatus key in a key storage device of the apparatus;

incorporating the public apparatus key in the apparatus certificate while generating the apparatus certificate; and

prevent a further access to the private signing key.