Method for handling a safety critical command in a computer network

摘要

A method for handling a safety critical command in a computer network with a safe computer and a non-safe operator terminal, the command concerning a transaction on an element, the method comprising : - transfer of the command from the non-safe operator terminal to the safe computer; - generation of a TAN; - generation of a first executable code and a second executable code by the safe computer; - encryption of the codes by the safe computer; - transmission of the encrypted codes to the non-safe operator terminal; decryption of the codes by the non-safe operator terminal; - execution of the first code on the non-safe operator terminal, whereby a query is displayed to the operator with an invitation to confirm the query; - in case of a confirmation by the operator, the second code is executed and the TAN is transferred to the safe computer.