Controller Security Monitoring for Adaptive Communication Protection

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing control apparatuses and systems are vulnerable to security threats due to advancements in information and communication technology, leading to potential disruptions in manufacturing processes.

Innovation Solution

A controller system with a security monitoring device that detects and responds to security events by adjusting communication settings based on the action state and control arithmetic operation of the control apparatus, enabling flexible security measures.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If control apparatuses are connected with external apparatuses via network to enable sophisticated processing, then productivity and functionality are improved, but vulnerability to security threats increases

Engineering Contradiction:

Improveprocessing capabilityVSAvoidsecurity threat vulnerability

Core Design Contradiction:

ProductivityVSObject-affected harmful factors

Solution Approach 1:

A security monitoring device is introduced as an intermediary component between the control apparatus and the network. This device monitors communication and detects security events, protecting the control apparatus while allowing network connectivity for sophisticated processing and high productivity.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If security protection measures are continuously enforced to protect against security events, then reliability is improved, but communication flexibility deteriorates

Engineering Contradiction:

Improvesecurity protectionVSAvoidcommunication flexibility

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The security protection process dynamically adjusts its enforcement level based on the detected action state. During execution states, communication is flexible with monitoring enabled. During permitted states where program changes are allowed, communication is restricted. This dynamic approach maintains reliability while preserving communication flexibility when safe.

Inventive Principle:

Principle #15Dynamics

3Ease of operation

If communication is always enabled between control apparatus and superordinate apparatus, then ease of operation is improved, but security risk increases

Engineering Contradiction:

Improvecommunication accessibilityVSAvoidsecurity risk

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The security monitoring device continuously monitors the action state of the control apparatus and provides feedback to adjust communication settings. When the apparatus is in a permitted state (program change allowed), communication is restricted. When in execution state, communication is enabled. This feedback mechanism ensures ease of operation during safe states while reducing security risk during vulnerable states.

Inventive Principle:

Principle #23Feedback

Data Source

PatentEP3904981B1Controller system, control apparatus, and control program

Publication Date: 2025.06.25 OMRON CORP

Figure 1~2
Figure 3
Figure 4

AI summary

The purpose of the present invention is to solve the new problem of appropriately protecting a control apparatus and a controller system including the control apparatus against a security event. The execution content of a security protection process performed by a security-monitoring device is determined in accordance with the action state of this control apparatus and/or a notification issued through a control arithmetic operation by the control apparatus.