Method for configuring an automated system for safety

Abstract

The invention relates to a method for configuring a control device (10) of an automation system, the method comprising the following steps: detecting (100, 200, 300, 230) a local entry token (22) via an interface (20) of the control device; and changing (120, 220, 320) at least one parameter of the control device, the parameter being designed to configure a data connection (18, 40) of the control device in response to the detection of the local entry token.

Description

Technical Field

[0001] The invention relates to a method for configuring a control device of an automation system and to an automation system in which such a method can be implemented, and to a computing unit and a computer program for carrying out the method. Background Art

[0002] Large parts of plants in industrial manufacturing and production are sometimes partially or completely automated. For this purpose, special hardware and firmware modules are also used, such as programmable controllers (such as SPS, memory-programmable controllers) or PC-based controllers. These hardware and firmware modules can take over all relevant functions, such as regulation, control, diagnosis and / or monitoring of automated sensors and actuators.

[0003] Machine operators are usually not exposed to the details of configuration and adjustment and therefore do not need to have the corresponding knowledge. Therefore, it is often necessary to be able to access the automation system from the outside for maintenance or configuration. For example, it is advantageous to provide a connection to an external network for maintenance or configuration and to open the corresponding access to the device control.

[0004] In contrast, such devices and their control mechanisms are often protected from other modules, internal networks and / or external networks to prevent security-related interventions. For example, physically separate network segments, address spaces, firewalls and other filter rules are used for this purpose.

[0005] It is therefore desirable to provide a simple and safe method for configuring an automation system. Summary of the invention

[0006] According to the invention, a method for configuring a control device of an automation system and an automation system are proposed having the features of the independent claims. Advantageous embodiments are the subject matter of the dependent claims and the following description.

[0007] In particular, a method for configuring a control device of an automation system is proposed, which method comprises detecting a local access token via an interface of the control device and changing at least one parameter of the control device, which parameter is provided for configuring a data connection of the control device in response to the detection of the local access token. In this way, for example, a data connection of the control device from or to an external network can be activated, or a data connection of the control device or a connected element to a lower network (such as a fieldbus) can be made available, that is, access restrictions can be removed.

[0008] According to a preferred embodiment, the change can include the following aspect, namely: changing the at least one parameter from a first value that at least partially prevents communication between the control device and the network to a second value that at least partially enables communication between the control device and the network (or vice versa). In this way, access to the network from or to the outside is temporarily activated by the recognition of the local access token, so that different regulation, communication and other activities can be performed via this network.

[0009] In addition, at least one data item can be received by the local token and one or more stored parameter values ​​can be selected on the basis of the received data item, which can be used to change parameters. These parameters can be stored in a storage element of the control device, so that a specific parameter value or a set of parameter values, such as a complete configuration copy, can be selected and applied based on the data received / called by the token by means of, for example, identification data of the entry token.

[0010] As an alternative or in addition, the access token itself can receive data items which represent parameter values ​​for a change in a parameter of the control device or on the basis of which such parameter values ​​for the change can be formed. Thus, for example, parameter sets can be stored on a memory element of the token which can then be transferred to the respective device to be configured and used there, without the automation system having to already have these data (e.g. the IP address of an update server).

[0011] According to an embodiment, it can be provided that the changed parameters, for example the connection data, are reset as soon as the local access token is no longer detected, that is, for example, as soon as a physically connected token is removed from the interface or a wirelessly connected token is deactivated or removed from the range of the reader of the interface. In this way, connection data and similar parameters can be temporarily configured by a local user in a simple manner and it is ensured that a secured state is subsequently established again.

[0012] Likewise, the changed parameters of the control device can also be reset after a predetermined time interval has elapsed since the change of the parameters and / or after a predetermined time interval has elapsed since the last detection of an access token. In this way, it is ensured that even in the case of an access token that remains connected unintentionally and, for example, has been forgotten in an interface, the secured connection configuration of the automation system is restored after a certain period of time.

[0013] Furthermore, it can be provided that before the parameters of the control device are changed, a local access token must first be authenticated at the interface in order to prevent unauthorized access to the configuration of safety-related modules and / or to differentiate between different access tokens and their functions. If the authentication fails, the parameter change can be prevented, in which case the preferably secure connection configuration remains and cannot be accessed from the outside.

[0014] Changing the parameters of the control device can include different functions, such as, for example, the assignment of an IP address for the control device, the definition of filter rules for received and / or sent data packets or a change in the access authorization for the control device, such as a change in firewall rules.

[0015] In addition, an automation system is proposed, which includes: a control device for controlling one or more automation devices; an interface configured to detect a local entry token; a configurable connection from the control device to at least one network; and an entry module connected to the interface and the control device, wherein the entry module is configured to perform the same method steps as described above individually or in combination.

[0016] A local access token is detected by the interface, which can include a wired or wireless interface. In addition, the system can include a local access token, which can be, for example, a USB memory element, a flash memory card, an active or passive RFID tag, an NFC tag, a mobile device or a smart card.

[0017] A computing unit according to the invention, for example a control unit of a production machine or a robotic cell, is configured, in particular in terms of programming, to carry out the method according to the invention.

[0018] It is also advantageous to implement the method according to the invention in the form of a computer program or a computer program product with a program code for carrying out all method steps, since this results in particularly low costs, in particular if the executing controller is also used for other tasks and is therefore already present. Suitable data carriers for providing the computer program are in particular magnetic, optical and electrical memories, such as hard disks, flash drives, EEPROMs, DVDs and the like. The program can also be downloaded via a computer network (Internet, intranet, etc.).

[0019] Further advantages and embodiments of the invention are apparent from the description and the drawings.

[0020] It goes without saying that the features mentioned above and those yet to be explained below can be used not only in the respectively specified combination but also in other combinations or alone, without departing from the scope of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] The invention is illustrated schematically in the drawings on the basis of exemplary embodiments and is described in more detail below with reference to the drawings.

[0022] Figure 1 An exemplary automation system according to the present invention is shown;

[0023] Figure 2 An exemplary method flow according to a first embodiment is shown;

[0024] Figure 3 An exemplary method flow according to a second embodiment is shown; and

[0025] Figure 4 Another exemplary method sequence according to the third embodiment is shown. DETAILED DESCRIPTION

[0026] Figure 1 An automation system is shown having a control device 10 which can have a configurable connection 40 to an external network 60. The control device is connected via a bus system 18 to two automation devices 12 and 14 which can be, for example, production robots or actuators and are controlled by the control device 10.

[0027] Such a system is usually secured, for example, by corresponding firewall rules, such as rules for packet filtering, to prevent access to and from the outside, that is, access to another network 60, such as a local area network, an intranet or also the Internet. There are different common field buses and associated protocols, by which connections can be established in a known manner within the automation system, such as, for example, SERCOS (Serial Realtime COmmunication System), EtherCAT, Modbus TCP, Profinet, TFTP, etc. In principle, for example, an automation device, such as a robot arm, can be directly provided with a corresponding interface for network connection and directly controlled by a suitable control device, which can also be integrated with the automation device. However, it is also possible to use the field bus as in the present embodiment for the simultaneous control of multiple automation devices 12, 14, that is, for example, multiple robots. For this purpose, for example, a control unit (SPS) 10 that can store programming can be used and also connected to the field bus, or as an alternative, a PC control unit can also be used and also connected to the field bus. Similarly, other sensors or automation devices can be used arbitrarily. For the present invention, the automation devices and bus systems used can be suitably selected without restriction, as long as a control device 10 is present which can connect 40 a single or multiple automation devices and / or the entire bus system to another network 60 via corresponding communication interfaces 30. In this case, a suitable network topology, such as a ring topology or a star topology, can also be selected for the exemplary bus system.

[0028] In the control device 10 or in connection therewith, a wireless or wired interface 20 is provided, which is able to detect a local access token 22 if it is connected to the interface 20 or is activated or detectable within its range. The control device can be connected to an external network and the organizations, servers 62, etc. located therein via the configurable network connection 40 or, for example, can be directly addressed to external devices 50, such as a mobile computer for maintenance. Optionally, an operator interface 16 (HMI, human machine interface) can be present on the control device, which can alternatively also be directly connected to the bus system 18 and used for interaction of the system with a user.

[0029] exist Figure 2 An exemplary sequence of the method according to the invention is shown in , in which access to a fieldbus device is made possible.

[0030] In this embodiment, it should be considered as the original state that the fieldbus device is at least partially restricted in its connection to the external network 60, such as an intranet or the Internet. Access to the configuration profile is often impossible in normal operation. In order to be able to configure or maintain at least one fieldbus device or to make other changes to the adjustment, a local entry token 22 can now be used. Such an entry token can be a physical token, which can be detected by the interface 20 of the control device 10. It can be a wireless or wired interface here. Once the local entry token is identified and detected by the interface of the control device in step 100, it can first be checked or verified in step 110 for its validity, and thereafter specific parameters can be automatically changed in the controller in step 120. The following parameters can be particularly involved here, which can enable access from a previously blocked network or access to a previously blocked network. For this reason, for example, the firewall rules for machine closure can be changed. After the access token has been identified, therefore, the predefined rules are modified in the control device or their parameters are determined so that access to the underlying fieldbus network is now enabled via a suitable protocol, which access was not possible before.

[0031] The control device and the fieldbus devices 12, 14 can now be accessed from the outside, i.e., for example, via a maintenance device 50 integrated into the network, via a local user interface on the device, or via an intranet or Internet connection 40 according to the changed rules, so that suitable configurations and settings can be changed. When the entry token 22 is recognized locally, further changes in the configuration do not have to be initiated by the local device or user, but can be carried out remotely. In a possible embodiment, access to the network is activated in step 130 as long as the entry token 22 is actively recognized, i.e., as long as a corresponding USB stick is inserted in the interface 20 or an RFID token is within the range of the reader, and as soon as the entry token can no longer be detected, i.e., it is removed by the user and the detection of the token 22 is negative, access to the network is deactivated in step 140. Preferably, the parameters, in the present case, the firewall rules for connecting to the other network 60 can then be reset in this step 140 to the values ​​set before the parameters were changed by the entry token 22. For this purpose, it can be provided that before changing the parameters, they are first read out and stored, and after the access token is removed from this storage location or deactivated, the parameters are read out and used again. Likewise, standard settings can be stored for one or more situations, which are accessed when resetting the parameters.

[0032] In another exemplary embodiment, the entry token 22 can be used to temporarily open a firewall for access from the outside. Figure 3 A corresponding method is explained, for which a flow chart is shown. Such a firewall is usually used between two network interfaces and filters the data set for the corresponding subnet on the basis of, for example, the MAC address (Bridging Firewall). For this transmission between the two networks, the firewall does not need its own IP address for the higher layer in active operation, so that the firewall cannot respond directly in the external network and is therefore "invisible" or transparent. In this way, the security of the automation system or automation device is further increased, because in this case it is impossible to tamper with the firewall rules from the outside. However, for administrative tasks from the network, the transparent firewall must therefore be temporarily assigned an IP address.

[0033] As already in the first exemplary embodiment, a local entry token can be used for this configuration of the connection parameters of the control device 10 or the firewall, which can be detected and read out in step 200 by the corresponding interface 20 of the control device or an interface directly or indirectly connected thereto. For example, an NFC tag can be used as a token 22, which is placed within the range of an NFC reading interface in the control device. Once the token has been recognized as valid in step 210 and optionally verified, a predetermined fixed IP address, which is stored in the device 10, for example, can be assigned to the firewall component in step 220. As an alternative, a regulation can also be changed as a parameter, which can assign a dynamic IP address in the network 60 to the device. The control device or transparent firewall can then respond via this IP address in the network and be configured or maintained as usual.

[0034] After the maintenance process has been completed, the user can place the token 22 within the range of the reader a second time, where it is detected again in step 230 and optionally re-checked for validity in step 240. If the token is recognized as valid or authenticated, the control device 10 can then cause a reset of the settings, that is to say the removal of the assignment of the IP address in this case, in step 250. The firewall component can then no longer respond and the system is safely shut down again.

[0035] In all variants, the local access token 22 should be designed for use with the corresponding provided interface and can therefore be designed as a counterpart. For example, the interface 20 in the control device can be a USB interface, wherein the access token 22 can be a USB memory element, such as a USB stick or a mobile device with an associated USB interface; as an alternative, the interface can be an RFID reader and the access token can include, for example, an active or passive RFID transponder chip or an RFID tag. All other suitable wireless and wired interfaces in the near field are also conceivable, namely in particular Bluetooth transmitters and receivers; other storage elements, such as an SD memory card with a suitable reader; an infrared receiver with an associated infrared source for data transmission, such as in accordance with the IrDA standard (Infrared Data Association); NFC (near field communication) with an NFC tag; any known or specially designed plug element for digital or analog transmission of signals at least from an entry token to an interface; a mobile device that can implement token functions using software technology and has a corresponding interface, such as Bluetooth, WLAN, NFC or other interface, which can cause a suitable interface in the controller to respond; and many other options.

[0036] The choice of which alternatives to choose from may depend, for example, on the interfaces already present, but may also depend on preconditions, such as range, required data transmission rate, etc. For example, for production plants, for which direct access is difficult to provide, wireless technologies with a large range, such as RFID or Bluetooth, for use in local access tokens, may make sense, while in devices with easy accessibility and an existing USB connection, using such interfaces for local access tokens is appropriate, but not mandatory. Similarly, NFC tags with a low data transmission rate and a small range of a few centimeters may make sense, preferably as pure switching elements for access without further data transmission, while more complex devices with corresponding interfaces may be preferred if it is desired to transmit larger amounts of data or variable parameters to the device. It is also possible to provide multiple interfaces simultaneously in the control device and / or in the access token, for example, to be able to use a single access token for multiple devices or for example to provide multiple digital inputs, by selecting the type of access token or interface for the device, where the access token triggers other configuration functions at the digital inputs.

[0037] Here, the local entry token itself can transmit additional data to the interface, which is stored, for example, in a storage element integrated therein or connected thereto, or can also simply be identified without further data transmission, so that the pure detection of the token itself triggers a change of the parameters, which is correspondingly predetermined and stored in the control device. The additional data can be used for different purposes. For example, the token may contain the following data, which is used to verify the token, so that only a valid entry token can cause a change in the connection parameters. Such verification data can be, for example, a secret or public key on the token and in the control device or a certificate stored on the token. The control device can then be set up in such a way that it only triggers a parameter change in a valid check. If other data, such as parameter values, are also stored on the entry token, these data can also be protected and / or encrypted, so that only a device with the corresponding key has access to the parameter value.

[0038] The control device 10 can also first check whether the recognized token is valid without further verification measures, for example by means of stored identification data, such as a unique identification code in the control device and a corresponding stored data record. If the access token is recognized but is not provided for configuring the relevant control device, access can be interrupted by outputting an optional warning signal.

[0039] The settings set in response to the recognition of a valid access token can be stored locally in the corresponding device, for example. Thus, for example, already predefined IP addresses or one or more predefined settings for filter mechanisms, such as firewalls, can be stored. When the access token is recognized, the corresponding parameters are replaced by these stored parameters and settings. In addition or as an alternative, it is possible to transmit data when or immediately after the token is recognized, which data at least partially include the corresponding parameters and configuration settings. Thus, for example, one or more parameters can be stored in the memory element of the token, which parameters are transmitted to the control device 10 via the interface 20 after the recognition and used to change the parameters.

[0040] It is also possible that a plurality of different adjustments, parameters or configurations are stored as options in the devices 10, 12, 14 and that one of these options is then selected depending on the recognition of a specific token. The recognition can be carried out without further data transmission, for example, so that a first configuration option is selected at a first interface (e.g. RFID) each time an entry token is recognized and a second configuration option is selected at a second interface (e.g. USB) each time a token is recognized. It is also possible that the token transmits data items during the communication process during the recognition, which data items can then select the correct parameter set in the device from a memory or a database. In this way, for example, different tokens can be output to people with different authorizations, which can then be used for different maintenance purposes.

[0041] In other combinable embodiments, more complex instructions can be stored in the control device and / or in the token. For example, after configuring the connection parameters, it can be provided in the existing entry token that the control device sends a maintenance request as a message to an external server, so that maintenance or updating can be started automatically or by an administrator from there. Similarly, it is also possible to store a predetermined network address, such as an IP address or URL, from which the control device can automatically request or download files or other data for updating after configuring the connection parameters, in order to then use them locally on the control device or on other devices connected thereto. In addition, the execution of a program on the control device or on a device connected thereto can be triggered by the entry token, so that, for example, after changing the access parameters, a corresponding maintenance application is automatically opened on the operating element, otherwise there is no access to the maintenance application.

[0042] In a corresponding bus configuration, for example, a set of parameters can also be stored and set in the device provided as the master, so that when the entry token is recognized, these parameters or other parameters are transmitted to the corresponding slave devices 12, 14. A similar embodiment is also conceivable in a ring topology, so that a change in the configuration of one element in the network also leads to a change in the other elements, while the recognition of the token is only necessary at one element of the ring.

[0043] Conversely, it can also be provided that, in addition to the regulation of parameters that cause the opening to the external network, such as the assignment of an IP address, further regulations are also provided that protect the underlying layers from access. Figure 2In an exemplary embodiment, when the entry token is recognized, an IP address can be assigned, which IP address can now configure the outward firewall element, while for this time interval communication to the underlying fieldbus network in the network area connected thereto is prevented.

[0044] In this case, it is possible to specify, as required, the changed configuration settings (i.e. Figure 2 The changed firewall rules or the allocated Figure 3 The IP address of the firewall module) remains valid until the access token is removed again, that is to say, for example, until the corresponding element, such as a USB stick, is removed from the interface or, in the case of a wireless interface such as NFC, is no longer within the necessary range. In this way, it can be ensured that the corresponding parameters can actually be changed only when the local access token is used and when the access to the device from the outside is reliably revoked when it is removed. For example, when using a wireless interface, a mechanical holder can also be provided, into which the NFC token device is inserted or held as long as a configuration of the device is desired.

[0045] As an alternative or in addition, it can also be provided that changed configuration settings, parameters and similar data for controlling the network connection remain valid for a predetermined time after the recognition of a valid access token and that the original settings or parameters are restored after the expiration of this predetermined time interval and thus the device or network is again protected against other networks. In this way, it is not absolutely necessary for an NFC tag, such as a token 22, to be permanently within the range of the access device during configuration. At the same time, the provision of a time interval after which the previous settings are restored ensures that unintentionally unreliable configurations are not retained on the device, which could represent a risk factor.

[0046] Optionally, within the predetermined time interval or after the end of the time interval, it can be checked again whether the access token is within the range or at the interface, and if this is the case, the time interval can be restarted and only after it has ended again and in the case of a negative check can the previous setting be reset. Thus, constant switching back and forth between configurations is avoided when the corresponding token is only briefly not connected or cannot be detected. Likewise, for such a case, it can be considered to define a minimum time in which the token for changing parameters on the interface must be recognized at the beginning, in order to prevent, for example, unintentional activation caused by a wireless token with a large range. Thus, for example, it can be stipulated that the token must be recognizable for at least 5 seconds and / or that the time during the access must not be longer than 3 seconds (or any other arbitrary time interval) in order to keep the network access valid. On the contrary, an end time interval preferably with a sufficiently long duration (e.g. several minutes or hours) can also be valid when the token is inserted / detected, in order to terminate the access to the device again, even if the token continues to be inserted unintentionally.

[0047] As an alternative or supplement to the measures mentioned, such as the expiration of a timer or the resetting of the configuration after the removal of the entry token, it can also be provided that the parameters are reset by communication from the outside. For example, it is conceivable that the local entry token is identified (steps 100, 200, 300 and 110, 210, 310), the connection parameters are subsequently changed as described above, and the components are maintained or updated via the now open network connection 40. As soon as all necessary data and instructions have been exchanged via the network connection, an instruction for resetting the connection parameters to the previous values ​​can be sent by the remote maintenance system and received in the control device, so that a possibly unsafe external connection is prevented again even if the token has not been removed or the time interval has not expired. Different variants for resetting parameters can of course also be combined with each other, so that, for example, not only the removal of the token from the interface but also external communication can cause a reset, optionally also in combination with a timer.

[0048] Figure 4Another embodiment of the method flow according to the invention is shown, in which the entry token is first identified in steps 300 and 310 and the validity is checked and, if the check is successful, the connection parameters are changed in step 320. After the connection to the external network has been established via the disconnected connection, a message can then be sent in step 330, which can, for example, start the download of update data or can display the disconnected connection to a remote administrator. In addition, in step 340 (which can also be carried out directly when the parameters are changed or when a valid token is identified), a timer can be started, which is set to a predetermined or configurable duration. In step 350, a check is made to see whether the timer has expired and, if this is the case, in step 360 the changed parameters are reset and the system is thus protected again. The steps shown here by way of example can of course also be repeated in the preceding steps from the system. Figure 2 and 3 used in the embodiments or combined in other ways.

[0049] Another possibility is that after the access token has been identified, further interaction with the device or token is necessary, for example confirmation of the token identification by means of a keyboard or touch screen or similar operating elements of the control device is necessary in order to ensure that only the desired device is configured, especially when using a wireless interface. Operating elements can also be provided on the access token itself, which, for example, activate an interface (e.g. activate an RFID tag or switch on a Bluetooth transmitter) or, for example, start a detection by a suitable reader in the form of a handshake protocol.

[0050] According to another embodiment variant, the recognition of the access token can correspondingly cause a switch from the current configuration state to another configuration state and vice versa. Figure 3 As described in , parameters can be changed (step 220), for example an IP address can be assigned, by first detecting 200 the entry token, and the parameters can be reset when the entry token is detected again (230), step 250. The entry token 22 does not have to be or should not be identified in the meantime. For this purpose, for example, as already described, operating elements can be present on the entry token, which are activated by the user at the corresponding time. As a result, the entry token switches back and forth between predetermined configuration states during each detection, wherein more than two states can also be set, for example, the states can be passed through successively.

[0051] However, it is also possible to optionally set up an entry token which, even after a one-time identification, causes a permanent or long-term change in the configuration settings, so that the setting parameters are not reset after the token is removed from the interface or are only changed again when another token, possibly also another token, is identified.

[0052] As described, a large number of configuration or parameter changes can usually be triggered by the recognition of a local access token. In particular, the parameter changes can include changes in filter rules for data packet transmission, the allocation of network addresses for devices, the execution of instructions, program modules or the sending of messages, the calling of data from a remote server, the opening of ports in a firewall, etc., which enable and / or prevent communication with the desired network.

[0053] Another advantage of the configuration method presented is that the device to be configured does not have to have its own operating elements, depending on the embodiment. It may be sufficient if an interface or reader for a suitable access token is present, while all further adjustments can be made via external connected devices or remotely via a network. Likewise, operating elements may be present for operating functions, but they do not have to be designed for more extensive configuration tasks. Both are advantageous in particular for fully automated industrial environments.

[0054] For the purposes of the present invention, the term automation system includes all sensors, actuators, stationary and mobile robots, semi-automatic and automated manufacturing machines, such as printing presses, processing machines and other devices also in combination with their corresponding control devices, storage elements, databases and networks.

[0055] It goes without saying that the described embodiments are cited only as examples and in particular different alternatives and alternatives can also be combined differently. Therefore, all the steps and configurations mentioned can also be applied to other or other parameter changes, can be combined with each other in other ways and optional steps can be omitted or supplemented. The described embodiments can be applied to all described alternatives, that is, for example, to other network elements, to one of the other mentioned interface technologies for access tokens and to any device or system with such access control, even if the invention is described with respect to automation systems and manufacturing environments.

Claims

1. A method for configuring a control device (10) of an automation system, comprising the following steps: detecting (100, 200, 300, 230) a local entry token (22) via an interface (20) of the control device; changing (120, 220, 320) at least one parameter of the control device, the at least one parameter being designed to configure a data connection of the control device in response to the detection of the local entry token, wherein the local entry token (22) is designed for use with the interface (20); and As soon as the local access token is no longer detected or as soon as a predetermined time interval has expired since the change of the parameter, at least one changed parameter of the control device is reset.

2. The method according to claim 1, The change (120, 220, 320) of the at least one parameter comprises a change from a first value that at least partially prevents communication between the control device and a network (60) to a second value that at least partially enables communication between the control device and the network.

3. The method according to claim 1 or 2, The following steps are also included: receiving at least one data item from said local entry token, and One or more stored parameter values ​​are selected for use in changing the at least one parameter based on the received data item.

4. The method according to claim 1 or 2, further comprising the following steps: receiving at least one parameter value from the local ingress token, and At least one parameter of the control device is changed based on the received parameter value.

5. The method according to claim 1 or 2, further comprising the following steps: Execute (110, 210, 310) verification of the local entry token, Wherein if the verification fails, at least one parameter of the control device is not changed.

6. The method according to claim 1 or 2, wherein the changing of the at least one parameter comprises at least one of the following steps: Assign an IP address to the control device, define filtering rules for received and / or sent data packets, and change access authorization for the control device.

7. Automation system, including the following parts: A control device (10) for controlling one or more automation devices (12, 14); An interface (20) configured to detect a local entry token (22); a configurable connection from the control device to at least one network; and an access module connected to the interface (20) and the control device, the access module being configured to carry out the method steps according to any one of the preceding claims 1 to 6.

8. The automation system according to claim 7, wherein the interface (20) for detecting the local access token comprises a wired interface or a wireless interface.

9. The automation system according to any one of claims 7 or 8 further comprises a local entry token (22) for unidirectional or bidirectional communication with the interface, wherein the local entry token comprises one of the following elements: a USB storage element, a flash memory card, an active or passive RFID tag, an NFC tag, a mobile device, a smart card. 10 . A computing device configured to carry out the method according to claim 1 .

11. Computer program product comprising a computer program, wherein the computer program, when executed on a computing device, causes the computing device to carry out the method according to any one of claims 1 to 6. 12 . A machine-readable storage medium having a computer program stored thereon, which, when executed on a computing device, causes the computing device to carry out the method according to claim 1 .

Images