Industrial Controller Physical Presence Verification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Industrial control systems face increased security risks due to remote access, allowing unauthorized users to potentially compromise or attack the system by performing unwanted control operations.

Innovation Solution

Implementing a physical presence verification mechanism in industrial control system controllers, which ensures that users are physically present at the controller's location before allowing control operations, using mechanisms such as buttons, switches, biometric scanners, or interfaces to verify presence and prevent remote access to safety-critical operations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If remote access is permitted for ICS controllers, then user convenience and operational flexibility are improved, but security risks and vulnerability to unauthorized access increase

Engineering Contradiction:
Improveremote access capabilityVSAvoidsecurity risk
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a physical presence verification mechanism as an intermediary between the user and the controller. This mechanism requires users to physically interact with the controller (e.g., through biometric authentication, physical buttons, or proximity detection) before remote access is granted. The intermediary prevents unauthorized remote access while allowing legitimate users convenient access, thus resolving the contradiction between ease of operation and security risk.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Object-affected harmful factors

If physical presence verification is implemented, then security against remote attacks is improved, but device complexity and operational restrictions increase

Engineering Contradiction:
Improvesecurity risk reductionVSAvoidverification mechanism complexity
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The patent replaces complex mechanical verification systems with electronic and optical detection mechanisms. Instead of using elaborate physical authentication devices, the system employs sensors, biometric scanners, or communication interface detection to verify physical presence. This substitution reduces device complexity while maintaining effective security against remote attacks.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

3Object-affected harmful factors

If physical presence verification is required, then protection from unauthorized control operations is improved, but ease of operation and accessibility are reduced

Engineering Contradiction:
Improveunauthorized access preventionVSAvoidoperational accessibility
Core Design Contradiction:
Object-affected harmful factorsVSEase of operation

Solution Approach 1:

The patent implements preliminary physical presence verification before granting access to control operations. Users must complete the verification process (such as biometric authentication or physical interaction) before they can access the controller. This preliminary action ensures unauthorized access is prevented while maintaining ease of operation for legitimate users, as the verification step is performed once before operation begins rather than continuously during operation.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS9645566B2Physical presence verification by an industrial control system controller
Publication Date: 2017.05.09 HONEYWELL INTERNATIONAL INC
  • US9645566B2 patent drawing
  • US9645566B2 patent drawing
  • US9645566B2 patent drawing

AI summary

Physical presence verification by an industrial control system controller is described herein. One industrial control system controller includes a mechanism configured to verify that a user of the industrial control system controller is physically present at a location of the controller, a memory, and a processor configured to execute executable instructions stored in the memory to permit the user to perform industrial control operations using the controller only if the user is physically present at the location of the controller.