Automation Configuration Access Control Using Electronic Tags
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The configuration of automation apparatuses in large and distributed industrial sites poses challenges due to technical implementation, usability, and data security complexities, with existing access control methods lacking sophistication for effective management.
Innovation Solution
An access control apparatus with a user interface, communication interfaces, and a processor that uses electronic tags for authentication, enabling secure configuration control of automation apparatuses through a networked service, allowing local and remote user access with defined access rights and period-based permissions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional access control methods are used for automation apparatus configuration, then implementation is simpler, but data security and usability are insufficient
Solution Approach 1:
The patent introduces an access control apparatus as an intermediary between users and the automation apparatus configuration process. This intermediary component manages authentication credentials, validates access rights, and controls configuration operations, thereby enhancing data security without requiring fundamental changes to the underlying automation system architecture.
Solution Approach 2:
The access control system is segmented into distinct functional components: a user interface for credential input, a processor for authentication logic and access right validation, and communication interfaces for interacting with both users and the automation apparatus. This segmentation allows each component to be optimized independently while maintaining overall system security.
2Reliability
If sophisticated access control is implemented, then data security improves, but ease of operation deteriorates
Solution Approach 1:
The access control apparatus automatically performs authentication verification and access right validation without requiring manual intervention from administrators. The system self-manages credential verification, determines appropriate access levels, and enforces configuration restrictions, thereby maintaining security while reducing operational burden on users.
Solution Approach 2:
Access credentials and access rights are configured and validated in advance before configuration operations are performed. The system pre-establishes authentication mechanisms and defines permitted operations, so that when users attempt configuration tasks, the security checks are already in place and do not impede the workflow.
3Manufacturing precision
If period-based access rights are implemented, then control precision improves, but device complexity increases
Solution Approach 1:
The access control system dynamically adjusts permissions based on time periods and operational contexts. Access rights are not static but change according to predefined time windows, user roles, and configuration stages, allowing precise control over when and how users can perform operations without requiring complex manual permission management.
Solution Approach 2:
The system controls access precision by changing parameters such as time periods, user roles, and operation types. By varying these parameters, the system can grant or restrict access to specific configuration functions at specific times, achieving fine-grained control through parameter management rather than structural complexity.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
An access control apparatus and method for controlling a configuration of an automation apparatus. The method includes: reading (202) authentication information from an electronic tag; transmitting (204) the authentication information to a networked service; receiving (206) access rights from the networked service; and controlling (208) the configuration of the automation apparatus according to the access rights.