Safety, Security and Law

Digitalization offers companies great opportunities to develop connected and, therefore, attractive products – from autonomously driving vehicles to smart electricity meters and networked manufacturing plants to smart refrigerators. However, the topic is highly complex: it is necessary to consider technical aspects, such as questions of functional safety and IT security, and regulatory framework conditions, such as liability or data protection. For many producers, these are major obstacles.

With its research focus “Safety, Security and Law”, the FZI is a competent partner for small and medium-sized enterprises (SMEs) – especially when it comes to clarifying related questions and researching new approaches to solutions: here, specialists for secure software and hardware development and cryptography cooperate closely with legal experts who focus on IT law and the legal evaluation of digitalized and connected products.

In an interdisciplinary process, our researchers develop new concepts for secure digitalized products, considering legal and technical aspects, together with research partners.

A key objective is improving IT security in the German market, especially for SMEs. The FZI will focus on two future technologies that promise strong economic effects: Artificial Intelligence (AI) and post-quantum cryptography.

In the field of AI, the FZI will focus more intensively on the mutual influence of AI on information safety and data security. How can AI methods for problem analysis be advanced and AI systems themselves be protected from attacks and manipulation by security mechanisms?

For SMEs, the FZI has set itself the goal of developing a strategy for post-quantum cryptography. Previous encryption methods are at risk regarding the advancing development of quantum computers. Companies’ products, services, and systems must be prepared for future security requirements.

Through its work, the FZI will increasingly support processes that strengthen the privacy and sovereignty of individuals. Critical infrastructures must be made resilient in the administration and for the citizens. Methods of IT security must be aligned through secure digital identities for citizens and empower them to handle their data with sovereignty.