Control Program Verification for Secure Setting Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing control devices face security risks due to malicious falsification of control programs and setting information, which can lead to incidents, and current solutions require significant user input and burden.
Innovation Solution
A control device with a security engine that verifies the identity of user programs and evaluates setting information, allowing or prohibiting modifications based on verification results, reducing the need for user input and preventing inappropriate falsification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption and identification data are used to protect control programs from malicious falsification, then security is improved, but user burden increases due to required preparation of identification data and encryption rules
Solution Approach 1:
The control device performs preliminary verification of program identity and setting information validity before allowing modification. The security engine pre-checks whether the second user program matches the first user program and whether the second setting information is valid, thereby preventing malicious falsification before it can occur. This preliminary action eliminates the need for users to manually prepare identification data and encryption rules, reducing user burden while maintaining security.
2Reliability
If manual verification and evaluation processes are implemented to prevent malicious falsification, then security is improved, but operational complexity increases
Solution Approach 1:
The control device performs self-verification of program identity and self-evaluation of setting information validity through its built-in security engine. The device automatically compares the first user program with the second user program, validates the second setting information against constraint conditions, and determines whether modification should be permitted without external intervention. This self-service mechanism simplifies operations while maintaining robust security checks.
3Ease of operation
If automated security verification is implemented to reduce user burden, then ease of operation is improved, but system complexity increases
Solution Approach 1:
The security engine merges multiple functions into a single integrated component: program identity verification, setting information validity evaluation, and modification permission determination. By combining these previously separate operations into one unified security engine, the system achieves automated security verification that reduces user burden without proportionally increasing system complexity. The merged structure allows these functions to work together efficiently within a single module.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A control device (1) can modify a first user program (140) and first setting information (53) in a storage unit executed by a control engine (142) respectively using a second user program (141) and second setting information (531) received by the control device. A security engine (230) of the control device verifies identity between the first user program and the second user program, evaluates the validity of setting indicated by the second setting information, and permits or prohibits performance of the above modification based on such a verification result and the evaluation.