Method for tamper-proof storage of data of a field device
The present disclosure relates to a method for tamper-proof storage of data of a field device operated by means of automation technology, wherein the field device comprises a sensor and/or actuator and an electronic unit, the field device generating data. The method comprises steps of creating at least one transaction containing generated data of the field device and storing the transaction in a data block of Blockchain technology comprising a data field containing stored transactions and a hash value. The method also includes steps of linking the data block to previously created data blocks, storing the data block in a service platform and creating and storing a security data block in the service platform.
1. A method for tamper-resistant storage of data of a field device of automation technology,
wherein the field device has a sensor and/or actuator and an electronics unit, comprising:
creating at least one transaction containing generated data of the field device;
storing the transaction in a blockchain technology data block having a data field containing saved transactions and a hash value;
linking the data block to previously-created data blocks by calculating the hash value of the data block from the data contained in the transaction and by calculating the hash value of a previous data block;
storing the data block in a service platform, wherein the previously-created data blocks are saved in the service platform; and
creating and storing a security data block in the service platform, wherein transactions of the hash value of the previous data block are additionally or alternatively contained in the data field of the security data block, wherein the hash value of the previous data block is signed with a first private key.
2. The method of claim 1 , wherein the service platform includes at least one database in which the data blocks or the security data blocks are saved centrally via a client/server architecture.
3. The method of claim 1 , wherein the service platform is operated decentrally with the aid of a blockchain technology and consists of a plurality of participant nodes, wherein the participant nodes create data blocks or security data blocks, wherein at least one database is integrated in each participant node, and wherein the data blocks or the security data blocks are saved decentrally in the databases.
4. The method of claim 3 , wherein the field device forms a participant node of the service platform and creates transactions and/or data blocks or security data blocks.
5. The method of claim 3 , wherein a created data block or security data block is verified by all participant nodes and is only saved in the service platform when at least a predetermined number of all participant nodes successfully verify the hash value of the data block or of the security data block.
6. The method of claim 5 , wherein the created transaction is transmitted to all participant nodes before being saved in the data block or in the security data block and is validated by the participant nodes, and wherein the created transaction is only saved in the data block or in the security data block if it is successfully validated by at least one of the participant nodes.
7. The method of claim 1 , wherein, before the transaction is created, the field device receives the hash value of the previous data block and signs and/or encrypts the generated data and/or the hash value of the previous data block with the first private key, or with a second key deviating from the first private key.
8. The method of claim 1 , wherein the security data block is created at defined time intervals.
9. The method of claim 1 , wherein the signed hash value is verified by means of a public key corresponding to the first private key.