Abstract: The invention relates to an apparatus (1a) and a method for controlling a critical system (S), as well as to a device (3a,3b) and a method for the distribution of messages for controlling said critical system (S), wherein said apparatus (1a) is configured for encrypting a first control message by using the first private key, transmitting said first encrypted message to a second apparatus (1b), receiving a second encrypted message generated by a second apparatus (1b) and encrypted by said second apparatus (1b) by using a second private key, decrypting said second encrypted message by using a public key associated with said second private key, verifying the second decrypted message on the basis of said first message and, if the verification is successful, encrypting at least said second encrypted message with said first private key, thereby generating a third encrypted message, and transmitting said third encrypted message.

Abstract: An apparatus and method for generating and verifying secure messages between vital equipment for controlling a railway network, wherein the apparatus includes control and/or processing components configured to carry out the following steps: a) generating a message body including information that may change the state of the railway network; b) generating a first pseudo-signature on the basis of the message body and a first cryptographic key; c) transmitting the first pseudo-signature to a second apparatus; d) receiving a second pseudo-signature from the second apparatus; e) generating a message signature on the basis of the second pseudo-signature and the first cryptographic key; f) generating a message by combining the message body and the message signature; g) sending the message to a recipient.

Abstract: An apparatus and method for generating and verifying secure messages between vital equipment for controlling a railway network, wherein the apparatus includes control and/or processing components configured to carry out the following steps: a) generating a message body including information that may change the state of the railway network; b) generating a first pseudo-signature on the basis of the message body and a first cryptographic key; c) transmitting the first pseudo-signature to a second apparatus; d) receiving a second pseudo-signature from the second apparatus; e) generating a message signature on the basis of the second pseudo-signature and the first cryptographic key; f) generating a message by combining the message body and the message signature; g) sending the message to a recipient.