Encryption of program instructions in a numerical control device
In a method for operating a numerical control device for controlling a production machine for producing a workpiece, program instructions generated by CAM software are encrypted with a first encryption key to generate first encrypted program instructions and the first encrypted program instructions are decrypted with a first decryption key to generate first decrypted program instructions. To prevent unauthorized access to the program instructions, the first decrypted program instructions are re-encrypted using a second encryption key to generate second encrypted program instructions, which are stored in a memory of the numerical control device. Subsequently, the second encrypted program instructions are read out of the memory and decrypted record-by-record or block-by-block, such that only those program instructions of the part program which are currently being processed by the numerical control device, or whose processing is imminent and used to control the production machine for the production of the workpiece.
1 . A method for operating a numerical control device for controlling a production machine for producing a workpiece, having the following steps:
generating program instructions forming individual records or blocks of multiple records of a part program for the production of the workpiece by using CAM (Computer Aided Manufacturing) software or post-processor software downstream of the CAM software in accordance with workpiece data for producing the workpiece with the production machine, with the program instructions generated by encrypting the program instructions with a first encryption key to generate first encrypted program instructions;
decrypting with the numerical control device the first encrypted program instructions with a first decryption key to generate first decrypted program instructions; immediately following decryption, encrypting the first decrypted program instructions with a second encryption key to generate second encrypted program instructions and storing the second encrypted program instructions in a memory of the numerical control device;
reading out the second encrypted program instructions from the memory, decrypting the second encrypted program instructions with a second decryption key record-by-record or block-by-block, such that only those program instructions of the part program which are currently being processed by the numerical control device, or whose processing is imminent, are decrypted to generate second decrypted program instructions; and
wherein the second encrypted program instructions are decrypted and made available only in a volatile memory of the numerical control device,
wherein the numerical control device, manages access permissions and following a positive check of the access permissions accesses, decrypts and processes the second encrypted program instructions to control the production machine for producing the workpiece.
2 . The method of claim 1 , further comprising generating, encrypting and transferring the program instructions to the numerical control device with a computing device disposed external to the numerical control device.
3 . The method of claim 1 , wherein the CAM software is stored in the memory of the numerical control device and is executed by a processor of the numerical control device.
4 . The method of claim 1 , wherein the first encryption key matches the first decryption key or the second encryption key matches the second decryption key, or both.
5 . The method of claim 1 , wherein the first encryption key differs from the first decryption key or the second encryption key differs from the second decryption key, or both.
6 . The method of claim 1 , wherein the second encrypted program instructions are decrypted in an NC kernel of the numerical control device to generate the second decrypted program instructions.
7 . The method of claim 1 , wherein the second encrypted program instructions are decrypted and made available only in a volatile memory of the numerical control device, in particular a volatile memory of a NC kernel of the numerical control device.
8 . The method of claim 1 , further comprising restricting decryption of the second encrypted program instructions to at least one of a specific numerical control device, a specific production machine and a specific license.
9 . The method as claimed in claim 1 , wherein the access permissions are stored in a DRM (Digital Rights Management) library in the numerical control device, or in a NC kernel of the numerical control device.
10 . The method of claim 1 , wherein the first encryption key and the first decryption key are generated together based on a Diffie-Hellman key exchange.
11 . A numerical control device for controlling a production machine for producing a workpiece, wherein the numerical control device is configured as set forth in claim 1 .
12 . The numerical control device of claim 11 , designed as a CNC control.
13 . A production machine system, comprising
a numerical control device as set forth in claim 10 , and
a production machine controlled with the numerical control device.
14 . The production machine system as set forth in claim 13 , constructed as a machine tool system which comprises a CNC control and a machine tool.
15 . The method of claim 1 , wherein the second encrypted program instructions are decrypted and made available in a volatile memory of a NC kernel of the numerical control device.
16 . The method of claim 15 , wherein the NC kernel manages the access permissions and accesses, decrypts and processes the second encrypted program instructions.