Abstract: A mobile device includes an operating system and at least two SIM profiles for providing several independent mobile connections. Network traffic is exchanged via at least one mobile connection with a mobile network and information transmitted with the network traffic is identified. The mobile device includes an intrusion detection system or an intrusion detection and defense system configured to identify at least the information transmitted with the network traffic. The intrusion detection system or the intrusion detection and defense system is arranged in a direction of the information flow of network traffic received from at least one mobile connection upstream of the operating system.

Abstract: A method for securely negotiating symmetrical keys between at least two participants of a communication involves each of the participants being equipped in pairs with a common secret or can be equipped indirectly via a further participant, which respectively shares a common secret with each other the two other participants. The participants are each equipped in pairs with at least one common key derivation function or can thus be equipped indirectly via the further participant. If a symmetrical key or the renewal of a symmetrical key is needed, it is derived based on the common secret and one of the key derivation functions according to a derivation rule, which includes at least the key derivation function to be used and at least one parameter for the key derivation function and is communicated to one of the participants by the other participant.

Abstract: Data transmitted in a system having at least three instances is authenticated between two of these instances. Some of the instances implement an authentication mechanism so that a first instance can authenticate itself to a neighboring instance trusting the first instance. The data to be transmitted by the first instance as a source instance to a non-neighboring target instance is authenticated by the source instance and passed to an intermediate instance that trusts the source instance. The intermediate instance checks the authentication and provides the data with the identity label of the source instance, reauthenticates the data, and passes it to a neighboring instance trusting the intermediate instance. The neighboring instance checks the authentication, reauthenticates the data provided with the identity label of the source instance and passes it to a neighboring instance that trusts it, this process being repeated until the data to be transmitted reaches the target instance.

Abstract: A method for checking cryptographic secrets for equality involves at least one of the secrets being stored in a read-protected manner in a secure system. The at least one secure system has a cryptographic hash value interface. For checking purposes, a hash value of the secret provided with a salt or with the hash value of a salt is output via the interface for comparison with a corresponding hash value of another secret provided with the salt or with the hash value of the salt.

Abstract: A method for implementing and using cryptographic material in at least one system component of an information technology system for performing at least one operation involves describing a state of the system component by at least one variable is checked at least at a first time. The cryptographic material is supplemented with additional data describing possible states of system components. The cryptographic material is used by the system component when the additional data of the cryptographic material include comprise at least the state that the system component has at the first time. The additional data are formed by at least one condition, at least one role, and/or at least one target component identity.

Abstract: Communications between a communication system of a vehicle and an external server external via a communication interface are secured such that data is transmitted to the communication system with integrity and authenticity protection, and also confidentially where necessary. A first securing method for the non-post-quantum-resistant securing of exchanged data is implemented, a second securing method for the post-quantum-resistant securing of exchanged data is implemented or is able to be implemented. Key material for the second securing method is initially introduced in the communication system and is stored securely or is able to be introduced via a further interface with cryptographic encryption and is securely stored for exclusive use in the second securing method.

Abstract: A system for generating cryptographic material includes a cryptomaterial server and developer module. The cryptomaterial server has at least one cryptomaterial generator and a cryptomaterial distributor. The cryptomaterial generator is set up to generate cryptographic material by using specifications that can be predetermined via the developer module. The cryptomaterial server has a receiving part of a specification interface and the developer module has a corresponding sending part of the specification interface, which can be coupled directly or indirectly for the secure transmission of data. The developer module has a user interface or can be coupled directly or indirectly to one that is set up for an input of the specifications in abstract form. A transformation module automatically transforms the input specifications into a syntax of the cryptomaterial generator.

Abstract: A method for securely negotiating symmetrical keys between at least two participants of a communication involves each of the participants being equipped in pairs with a common secret or can be equipped indirectly via a further participant, which respectively shares a common secret with each other the two other participants. The participants are each equipped in pairs with at least one common key derivation function or can thus be equipped indirectly via the further participant. If a symmetrical key or the renewal of a symmetrical key is needed, it is derived based on the common secret and one of the key derivation functions according to a derivation rule, which includes at least the key derivation function to be used and at least one parameter for the key derivation function and is communicated to one of the participants by the other participant.

Abstract: A method for implementing and using cryptographic material in at least one system component of an information technology system for performing at least one operation involves describing a state of the system component by at least one variable is checked at least at a first time. The cryptographic material is supplemented with additional data describing possible states of system components. The cryptographic material is used by the system component when the additional data of the cryptographic material include comprise at least the state that the system component has at the first time. The additional data are formed by at least one condition, at least one role, and/or at least one target component identity.

Abstract: A mobile device includes an operating system and at least two SIM profiles for providing several independent mobile connections. Network traffic is exchanged via at least one mobile connection with a mobile network and information transmitted with the network traffic is identified. The mobile device includes an intrusion detection system or an intrusion detection and defense system configured to identify at least the information transmitted with the network traffic. The intrusion detection system or the intrusion detection and defense system is arranged in a direction of the information flow of network traffic received from at least one mobile connection upstream of the operating system.

Abstract: A method for checking cryptographic secrets for equality involves at least one of the secrets being stored in a read-protected manner in a secure system. The at least one secure system has a cryptographic hash value interface. For checking purposes, a hash value of the secret provided with a salt or with the hash value of a salt is output via the interface for comparison with a corresponding hash value of another secret provided with the salt or with the hash value of the salt.

Abstract: Communications between a communication system of a vehicle and an external server external via a communication interface are secured such that data is transmitted to the communication system with integrity and authenticity protection, and also confidentially where necessary. A first securing method for the non-post-quantum-resistant securing of exchanged data is implemented, a second securing method for the post-quantum-resistant securing of exchanged data is implemented or is able to be implemented. Key material for the second securing method is initially introduced in the communication system and is stored securely or is able to be introduced via a further interface with cryptographic encryption and is securely stored for exclusive use in the second securing method.

Abstract: A method for secure usage of cryptographic material in networked system components provided with the cryptographic material in which a lifecycle of every system component includes at least one development phase and one production phase. The entire cryptographic material is at least directly securely marked as development or production material. Each system component has a binary state flag showing which phase the system component is in and which is secured against unauthorized manipulation. Each system component determines via an assessment function which phase it is in, according to which each system component carries out a check, during which the current phase and the marker of the cryptographic material are compared. Security measures are introduced if there is no agreement between the phase and the marker.

Abstract: A method for secure usage of cryptographic material in networked system components provided with the cryptographic material in which a lifecycle of every system component includes at least one development phase and one production phase. The entire cryptographic material is at least directly securely marked as development or production material. Each system component has a binary state flag showing which phase the system component is in and which is secured against unauthorized manipulation. Each system component determines via an assessment function which phase it is in, according to which each system component carries out a check, during which the current phase and the marker of the cryptographic material are compared. Security measures are introduced if there is no agreement between the phase and the marker.

Abstract: A communication device for a vehicle has a communication unit set up to establish a communication link between the vehicle and an external vehicle server and to exchange data in a cryptographically secured manner between the vehicle and the external vehicle server. The communication unit is further set up to be operated in a first or second mode. The modes differ in the type of cryptographic securing of the data. The communication unit has a secure hardware memory in which a binary value corresponding to the respective mode is stored.

Abstract: A system for generating cryptographic material includes a cryptomaterial server and developer module. The cryptomaterial server has at least one cryptomaterial generator and a cryptomaterial distributor. The cryptomaterial generator is set up to generate cryptographic material by using specifications that can be predetermined via the developer module. The cryptomaterial server has a receiving part of a specification interface and the developer module has a corresponding sending part of the specification interface, which can be coupled directly or indirectly for the secure transmission of data. The developer module has a user interface or can be coupled directly or indirectly to one that is set up for an input of the specifications in abstract form. A transformation module automatically transforms the input specifications into a syntax of the cryptomaterial generator.