{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,9]],"date-time":"2026-02-09T14:19:49Z","timestamp":1770646789071,"version":"3.49.0"},"reference-count":48,"publisher":"MDPI AG","issue":"1","license":[{"start":{"date-parts":[[2021,1,14]],"date-time":"2021-01-14T00:00:00Z","timestamp":1610582400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100004955","name":"Austrian Research Promotion Agency","doi-asserted-by":"publisher","award":["878804"],"award-info":[{"award-number":["878804"]}],"id":[{"id":"10.13039\/501100004955","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["JCP"],"abstract":"<jats:p>With the growing popularity of robots, the development of robot applications is subject to an ever increasing number of additional requirements from e.g., safety, legal and ethical sides. The certification of an application for compliance to such requirements is an essential step in the development of a robot program. However, at this point in time it must be ensured that the integrity of this program is preserved meaning that no intentional or unintentional modifications happen to the program until the robot executes it. Based on the abstraction of robot programs as workflows we present in this work a cryptography-powered distributed infrastructure for the preservation of robot workflows. A client composes a robot program and once it is accepted a separate entity provides a digital signature for the workflow and its parameters which can be verified by the robot before executing it. We demonstrate a real-world implementation of this infrastructure using a mobile manipulator and its software stack. We also provide an outlook on the integration of this work into our larger undertaking to provide a distributed ledger-based compliant robot application development environment.<\/jats:p>","DOI":"10.3390\/jcp1010006","type":"journal-article","created":{"date-parts":[[2021,1,14]],"date-time":"2021-01-14T11:39:14Z","timestamp":1610624354000},"page":"93-118","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":7,"title":["A Cryptography-Powered Infrastructure to Ensure the Integrity of Robot Workflows"],"prefix":"10.3390","volume":"1","author":[{"given":"Benjamin","family":"Breiling","sequence":"first","affiliation":[{"name":"JOANNEUM RESEARCH-Institute for Robotics and Mechatronics, 9020 Klagenfurt, Austria"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0450-8990","authenticated-orcid":false,"given":"Bernhard","family":"Dieber","sequence":"additional","affiliation":[{"name":"JOANNEUM RESEARCH-Institute for Robotics and Mechatronics, 9020 Klagenfurt, Austria"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Martin","family":"Pinzger","sequence":"additional","affiliation":[{"name":"Alpen-Adria-Universit\u00e4t Klagenfurt-Software Engineering Research Group, University of Klagenfurt, 9020 Klagenfurt, Austria"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2821-2489","authenticated-orcid":false,"given":"Stefan","family":"Rass","sequence":"additional","affiliation":[{"name":"Alpen-Adria-Universit\u00e4t Klagenfurt-System Security Research Group, University of Klagenfurt, 9020 Klagenfurt, Austria"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2021,1,14]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","unstructured":"Mo, Y., and Sinopoli, B. (2012, January 17\u201318). Integrity Attacks on Cyber-Physical Systems. Proceedings of the 1st International Conference on High Confidence Networked Systems, HiCoNS\u201912, Beijing, China.","DOI":"10.1145\/2185505.2185514"},{"key":"ref_2","unstructured":"IEC (2019). Security for Industrial Automation and Control Systems\u2014Part 4-2: Technical Security Requirements for IACS Components, Standard, International Electrotechnical Commission (IEC)."},{"key":"ref_3","unstructured":"Biggs, G., and Macdonald, B. (2003, January 1\u20133). A Survey of Robot Programming Systems. Proceedings of the Australasian Conference on Robotics and Automation, CSIRO, Brisbane, Australia."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"413","DOI":"10.1016\/bs.adcom.2017.12.007","article-title":"A Taxonomy of Software Integrity Protection Techniques","volume":"112","author":"Ahmadvand","year":"2019","journal-title":"Adv. Comput."},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Billard, A., Calinon, S., Dillmann, R., and Schaal, S. (2008). Survey: Robot Programming by Demonstration. Springer Handbook of Robotics, Springer. Book winner of 2 PROSE awards (Award for Excellence in Physical Sciences & Mathematics, Award for Engineering & Technology).","DOI":"10.1007\/978-3-540-30301-5_60"},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Heimann, O., and Guhl, J. (2020, January 8\u201311). Industrial Robot Programming Methods: A Scoping Review. Proceedings of the 2020 25th IEEE International Conference on Emerging Technologies and Factory Automation (ETFA), Vienna, Austria.","DOI":"10.1109\/ETFA46521.2020.9211997"},{"key":"ref_7","unstructured":"Ritschel, N., Kovalenko, V., Holmes, R., Garcia, R., and Shepherd, D.C. (2020). Comparing Block-based Programming Models for Two-armed Robots. IEEE Trans. Softw. Eng., 1."},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Winterer, M., Salomon, C., K\u00f6berle, J., Ramler, R., and Schittengruber, M. (2020, January 8\u201311). An Expert Review on the Applicability of Blockly for Industrial Robot Programming. Proceedings of the 2020 25th IEEE International Conference on Emerging Technologies and Factory Automation (ETFA), Vienna, Austria.","DOI":"10.1109\/ETFA46521.2020.9212036"},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Dieber, B., Kacianka, S., Rass, S., and Schartner, P. (2016, January 9\u201314). Application-level security for ROS-based Applications. Proceedings of the 2016 IEEE\/RSJ International Conference on Intelligent Robots and Systems (IROS 2016), Daejeon, Korea.","DOI":"10.1109\/IROS.2016.7759659"},{"key":"ref_10","unstructured":"Karaca, M., and Yayan, U. (2020). ROS Based Visual Programming Tool for Mobile Robot Education and Applications. arXiv."},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Koubaa, A. (2020). Penetration Testing ROS. Robot Operating System (ROS): The Complete Reference (Volume 4), Springer International Publishing.","DOI":"10.1007\/978-3-030-20190-6"},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Konstantinou, C., Maniatakos, M., Saqib, F., Hu, S., Plusquellic, J., and Jin, Y. (2015, January 25\u201329). Cyber-physical systems: A security perspective. Proceedings of the 2015 20th IEEE European Test Symposium (ETS), Freiburg, Germany.","DOI":"10.1109\/ETS.2015.7138763"},{"key":"ref_13","unstructured":"Karlsen, R.E., Gage, D.W., Shoemaker, C.M., and Gerhart, G.R. (2013). A Preliminary Cyber-Physical Security Assessment of the Robot Operating System (ROS), International Society for Optics and Photonics, SPIE. Unmanned Systems Technology XV."},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Yousef, K.A., AlMajali, A., Ghalyon, S., Dweik, W., and Mohd, B. (2018). Analyzing Cyber-Physical Threats on Robotic Platforms. Sensors, 18.","DOI":"10.3390\/s18051643"},{"key":"ref_15","unstructured":"Taurer, S., Breiling, B., Svrta, S., and Dieber, B. (2019, January 11\u201318). Case study: Remote attack to disable MiR100 safety. Proceedings of the First Cybersecurity for Robotics 2019 Conference (CSfR2019), Bilbao, Spain."},{"key":"ref_16","unstructured":"Lacava, G., Marotta, A., Martinelli, F., Saracino, A., La Marra, A., Gil-Uriarte, E., and Vilches, V.M. (2020). Current Research Issues on Cyber Security in Robotics, Consiglio Nazionale delle Ricerche. Technical report."},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Quarta, D., Pogliani, M., Polino, M., Maggi, F., Zanchettin, A.M., and Zanero, S. (2017, January 22\u201324). An Experimental Security Analysis of an Industrial Robot Controller. Proceedings of the 2017 IEEE Symposium on Security and Privacy (SP), San Jose, CA, USA.","DOI":"10.1109\/SP.2017.20"},{"key":"ref_18","unstructured":"Bonaci, T., Herron, J., Yusuf, T., Yan, J., Kohno, T., and Chizeck, H.J. (2015). To Make a Robot Secure: An Experimental Analysis of Cyber Security Threats Against Teleoperated Surgical Robots. arXiv."},{"key":"ref_19","unstructured":"Vilches, V.M., Juan, L.U.S., Dieber, B., Carbajo, U.A., and Gil-Uriarte, E. (2019). Introducing the Robot Vulnerability Database (RVD). arXiv."},{"key":"ref_20","unstructured":"Maggi, F., and Pogliani, M. (2020). Rogue Automation\u2014Vulnerable and Malicious Code in Industrial Programming, TrendMicro. Technical report."},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Pogliani, M., Maggi, F., Balduzzi, M., Quarta, D., and Zanero, S. (2020, January 1\u20135). Detecting Insecure Code Patterns in Industrial Robot Programs. Proceedings of the 15th ACM Asia Conference on Computer and Communications Security, ASIA CCS\u201920, Taipei, Taiwan.","DOI":"10.1145\/3320269.3384735"},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Adi, W. (2009, January 20\u201321). Mechatronic Security and Robot Authentication. Proceedings of the 2009 Symposium on Bio-Inspired Learning and Intelligent Systems for Security, Edingburgh, UK.","DOI":"10.1109\/BLISS.2009.30"},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"1729881418770011","DOI":"10.1177\/1729881418770011","article-title":"Robot Operating System 2: The need for a holistic security approach to robotic architectures","volume":"15","author":"DiLuoffo","year":"2018","journal-title":"Int. J. Adv. Robot. Syst."},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"192","DOI":"10.1016\/j.robot.2017.09.017","article-title":"Security for the Robot Operating System","volume":"98","author":"Dieber","year":"2017","journal-title":"Robot. Auton. Syst."},{"key":"ref_25","unstructured":"Mayoral-Vilches, V., Pinzger, M., Rass, S., Dieber, B., and Gil-Uriarte, E. (2020). Can ROS be used securely in industry? Red teaming ROS-Industrial. arXiv."},{"key":"ref_26","unstructured":"Vilches, V.M., Kirschgens, L.A., Calvo, A.B., Cordero, A.H., Pis\u00f3n, R.I., Vilches, D.M., Rosas, A.M., Mendia, G.O., Juan, L.U.S., and Ugarte, I.Z. (2019). Introducing the Robot Security Framework (RSF), a standardized methodology to perform security assessments in robotics. arXiv."},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Dieber, B., and Breiling, B. (2019, January 25\u201327). Security considerations in modular mobile manipulation. Proceedings of the 3rd International Conference on Robotic Computing, Naples, Italy.","DOI":"10.1109\/IRC.2019.00019"},{"key":"ref_28","unstructured":"European Commission (2019). Highl-Level Experts Group on Artificial Intelligence, European Commission. Ethics guidelines for trustworthy AI; Technical report."},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"14","DOI":"10.1109\/MIS.2009.69","article-title":"Beyond Asimov: The Three Laws of Responsible Robotics","volume":"24","author":"Murphy","year":"2009","journal-title":"IEEE Intell. Syst."},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Heyer, C. (2010, January 18\u201322). Human-robot interaction and future industrial robotics applications. Proceedings of the 2010 IEEE\/RSJ International Conference on Intelligent Robots and Systems, Taipei, Taiwan.","DOI":"10.1109\/IROS.2010.5651294"},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Kacianka, S., and Pretschner, A. (2018, January 7\u201310). Understanding and Formalizing Accountability for Cyber-Physical Systems. Proceedings of the 2018 IEEE International Conference on Systems, Man, and Cybernetics (SMC), Miyazaki, Japan.","DOI":"10.1109\/SMC.2018.00536"},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Badger, J.M., and Rozier, K.Y. (2019). Practical Causal Models for Cyber-Physical Systems, Springer International Publishing. NASA Formal Methods.","DOI":"10.1007\/978-3-030-20652-9"},{"key":"ref_33","unstructured":"Warren, D.R. (1954). A Device for Assisting Investigation into Aircraft Accidents, Aeronautical Research Laboratories. Technical report."},{"key":"ref_34","doi-asserted-by":"crossref","unstructured":"Taurer, S., Dieber, B., and Schartner, P. (2018, January 1\u20135). Secure data recording and bio-inspired functional integrity for intelligent robots. Proceedings of the 2018 IEEE\/RSJ International Conference on Intelligent Robots and Systems (IROS 2018), Madrid, Spain.","DOI":"10.1109\/IROS.2018.8593994"},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"3812","DOI":"10.1109\/LRA.2019.2928780","article-title":"Black Block Recorder: Immutable Black Box Logging for Robots via Blockchain","volume":"4","author":"White","year":"2019","journal-title":"IEEE Robot. Autom. Lett."},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Fuentetaja Piz\u00e1n, R., Garc\u00eda Olaya, \u00c1., Sesmero Lorente, M.P., Iglesias Mart\u00ednez, J.A., and Ledezma Espino, A. (2019). Accountability in Mobile Service Robots. Advances in Physical Agents, Springer International Publishing.","DOI":"10.1007\/978-3-319-99885-5"},{"key":"ref_37","doi-asserted-by":"crossref","unstructured":"Silva, M.F., Lu\u00eds Lima, J., Reis, L.P., Sanfeliu, A., and Tardioli, D. (2020). Adapting ROS Logs to Facilitate Transparency and Accountability in Service Robotics. Robot 2019: Fourth Iberian Robotics Conference, Springer International Publishing.","DOI":"10.1007\/978-3-030-35990-4"},{"key":"ref_38","doi-asserted-by":"crossref","unstructured":"Herrero, \u00c1., Cambra, C., Urda, D., Sedano, J., Quinti\u00e1n, H., and Corchado, E. (2020, January 16\u201318). Traceability and Accountability in Autonomous Agents. Proceedings of the 13th International Conference on Computational Intelligence in Security for Information Systems (CISIS 2020), Burgos, Spain.","DOI":"10.1007\/978-3-030-57805-3"},{"key":"ref_39","unstructured":"Merkle, R.C. (1990, January 20\u201324). A Certified Digital Signature. Proceedings of the Advances in Cryptology\u2014CRYPTO\u2019 89 Proceedings, Santa Barbara, CA, USA."},{"key":"ref_40","unstructured":"Kuszmaul, J. (2018). Verkle Trees, Massachusets Institute of Technology. Technical report."},{"key":"ref_41","doi-asserted-by":"crossref","first-page":"2280","DOI":"10.1016\/j.patcog.2014.01.005","article-title":"Automatic generation and detection of highly reliable fiducial markers under occlusion","volume":"47","year":"2014","journal-title":"Pattern Recognit."},{"key":"ref_42","unstructured":"Haspl, T., Breiling, B., Dieber, B., Pichler, M., and Breitenhuber, G. (2019, January 9\u201310). Flexible industrial mobile manipulation: A software perspective. Proceedings of the OAGM & ARW Joint Workshop 2019, Steyr, Austria."},{"key":"ref_43","unstructured":"Gasparetto, A., and Ceccarelli, M. (2019, January 11\u201313). Intuitive Hand Guidance of a Force-Controlled Sensitive Mobile Manipulator. Proceedings of the IFToMM Symposium on Mechanism Design for Robotics, Udine, Italy."},{"key":"ref_44","doi-asserted-by":"crossref","unstructured":"Weyrer, M., Brandst\u00f6tter, M., and Husty, M. (2019). Singularity Avoidance Control of a Non-Holonomic Mobile Manipulator for Intuitive Hand Guidance. Robotics, 8.","DOI":"10.3390\/robotics8010014"},{"key":"ref_45","doi-asserted-by":"crossref","unstructured":"Abood, O.G., Elsadd, M.A., and Guirguis, S.K. (2017, January 19\u201321). Investigation of cryptography algorithms used for security and privacy protection in smart grid. Proceedings of the 2017 Nineteenth International Middle East Power Systems Conference (MEPCON), Cairo, Egypt.","DOI":"10.1109\/MEPCON.2017.8301249"},{"key":"ref_46","doi-asserted-by":"crossref","first-page":"187","DOI":"10.1080\/23742917.2017.1384917","article-title":"Lightweight cryptography methods","volume":"1","author":"Buchanan","year":"2017","journal-title":"J. Cyber Secur. Technol."},{"key":"ref_47","unstructured":"Mayoral-Vilches, V., Garc\u00eda-Maestro, N., Towers, M., and Gil-Uriarte, E. (2020). DevSecOps in Robotics. arXiv."},{"key":"ref_48","doi-asserted-by":"crossref","unstructured":"di Vimercati, S.C., Syverson, P., and Gollmann, D. (2005, January 12\u201314). Sanitizable Signatures. Proceedings of the Computer Security\u2014ESORICS 2005, Milan, Italy.","DOI":"10.1007\/11555827"}],"container-title":["Journal of Cybersecurity and Privacy"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2624-800X\/1\/1\/6\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T05:11:05Z","timestamp":1760159465000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2624-800X\/1\/1\/6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,1,14]]},"references-count":48,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2021,3]]}},"alternative-id":["jcp1010006"],"URL":"https:\/\/doi.org\/10.3390\/jcp1010006","relation":{},"ISSN":["2624-800X"],"issn-type":[{"value":"2624-800X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,1,14]]}}}