Control Program Verification for Secure Setting Updates

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing control devices face security risks due to malicious falsification of control programs and setting information, which can lead to incidents, and current solutions require significant user input and burden.

Innovation Solution

A control device with a security engine that verifies the identity of user programs and evaluates setting information, allowing or prohibiting modifications based on verification results, reducing the need for user input and preventing inappropriate falsification.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If encryption and identification data are used to protect control programs from malicious falsification, then security is improved, but user burden increases due to required preparation of identification data and encryption rules

Engineering Contradiction:
ImprovesecurityVSAvoiduser burden
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The control device performs preliminary verification of program identity and setting information validity before allowing modification. The security engine pre-checks whether the second user program matches the first user program and whether the second setting information is valid, thereby preventing malicious falsification before it can occur. This preliminary action eliminates the need for users to manually prepare identification data and encryption rules, reducing user burden while maintaining security.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If manual verification and evaluation processes are implemented to prevent malicious falsification, then security is improved, but operational complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidoperational complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The control device performs self-verification of program identity and self-evaluation of setting information validity through its built-in security engine. The device automatically compares the first user program with the second user program, validates the second setting information against constraint conditions, and determines whether modification should be permitted without external intervention. This self-service mechanism simplifies operations while maintaining robust security checks.

Inventive Principle:
Principle #25Self-service

3Ease of operation

If automated security verification is implemented to reduce user burden, then ease of operation is improved, but system complexity increases

Engineering Contradiction:
Improveuser burdenVSAvoidsystem complexity
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The security engine merges multiple functions into a single integrated component: program identity verification, setting information validity evaluation, and modification permission determination. By combining these previously separate operations into one unified security engine, the system achieves automated security verification that reduces user burden without proportionally increasing system complexity. The merged structure allows these functions to work together efficiently within a single module.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentEP4075308B1Control device, control system, management method, and program
Publication Date: 2025.09.17 OMRON CORP
  • EP4075308B1 patent drawingFigure 1
  • EP4075308B1 patent drawingFigure 2
  • EP4075308B1 patent drawingFigure 3

AI summary

A control device (1) can modify a first user program (140) and first setting information (53) in a storage unit executed by a control engine (142) respectively using a second user program (141) and second setting information (531) received by the control device. A security engine (230) of the control device verifies identity between the first user program and the second user program, evaluates the validity of setting indicated by the second setting information, and permits or prohibits performance of the above modification based on such a verification result and the evaluation.