BMS Cyber Health Dashboard for Account and Network Risk Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Building Management Systems (BMS) face challenges in easily assessing and mitigating cybersecurity risks, making them vulnerable to cyber threats from both internal and external attacks due to technical limitations in managing user account and network device settings.
Innovation Solution
A method for automatically detecting and mitigating cybersecurity risks in BMS by evaluating user account and network device settings, identifying security risks, and presenting policy recommendations through a user interface, allowing users to implement changes based on input or automated responses to enhance cybersecurity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If BMS implements comprehensive security monitoring and evaluation of user accounts and network devices, then cybersecurity risk detection capability is improved, but system complexity increases
Solution Approach 1:
The patent introduces a cyber health management system as an intermediary layer between the BMS administrator and the complex security evaluation processes. This intermediary automatically assesses user accounts, network devices, and system settings, presenting simplified security risk information to administrators without requiring them to understand the underlying complexity of security protocols and device configurations.
Solution Approach 2:
The system performs self-service by automatically evaluating security settings of user accounts and network devices without requiring manual administrator intervention. The cyber health management system autonomously identifies security risks, generates policy recommendations, and can automatically implement security policies, reducing the need for complex manual security management procedures.
2Ease of operation
If BMS provides detailed policy recommendations and user interface for security risk management, then ease of operation is improved, but device complexity increases
Solution Approach 1:
The cyber health management system acts as an intermediary that translates complex security device settings and policies into user-friendly interface elements. The system presents security risks and policy recommendations through an accessible user interface, allowing administrators to manage security without needing to understand the underlying device complexity.
Solution Approach 2:
The system creates simplified representations (copies) of complex security device states and configurations through the user interface. Instead of requiring administrators to directly interact with complex device settings, the system presents copied, simplified views of security status and policy options that are easier to understand and manipulate.
3Productivity
If BMS implements automated security policy implementation, then productivity is improved, but reliability may worsen due to potential automated errors
Solution Approach 1:
The system implements feedback mechanisms where security policy changes are evaluated and monitored after automated implementation. The cyber health management system continuously assesses the effects of implemented policies and can provide feedback for adjustments, ensuring that automated changes maintain high reliability through continuous verification and correction capabilities.
Data Source
AI summary
A method for automatically detecting and mitigating risks related to cybersecurity in a Building Management System (BMS) includes evaluating settings of a user account of the BMS; identifying a security risk associated with the settings of the user account; evaluating settings of a network device of the BMS; identifying another security risk associated with the settings of the network device, presenting a user interface, wherein the user interface allows a user to view a policy recommendation associated with either security risk; and implementing the change in the settings of the user account or a change in the settings of the network device based at least in part on an input from the user via the user interface or an automated response to the policy recommendation. The method allows for administrators to easily view and change settings of user accounts and network devices to improve the cybersecurity of the BMS.