Digital Twin Access Gateway for Secure Remote Facility Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data access methods for complex technical facilities are laborious and prone to errors, especially when third parties need remote access, and current network-based solutions lack security and reliability.
Innovation Solution
A system enabling secure and remote data access through a digital twin representation of the facility, using unique UUIDs for identification and communication, allowing third parties to access and update software components indirectly via the digital twin.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If network-based data access is implemented for remote third-party access, then ease of operation is improved, but security and reliability deteriorate
Solution Approach 1:
The patent introduces a data-transmission interface as an intermediary component between the technical facility and the data-processing device. This interface acts as a secure gateway that mediates all communication, allowing remote third-party access while maintaining security through controlled information exchange protocols. The interface translates and filters data packets, ensuring that only authorized information passes through the network connection.
Solution Approach 2:
The patent creates a digital representation (digital twin) of the technical facility's software components and parameters. Third parties access this copy rather than the actual facility, which eliminates security risks associated with direct access. The digital twin contains all necessary operational data and parameters, allowing complete remote access functionality without compromising the security or reliability of the physical facility.
2Ease of operation
If network-based data access is implemented for remote third-party access, then ease of operation is improved, but assignment errors increase
Solution Approach 1:
The patent assigns a unique identifier (UUID) to each technical facility and its corresponding data-transmission interface before network access is established. This preliminary identification step ensures that when third parties connect remotely, they are automatically and accurately directed to the correct facility without human intervention for address assignment. The UUID is pre-configured in the interface, eliminating the possibility of wrong IP address assignment or accessing the wrong machine.
Solution Approach 2:
The digital twin contains an exact copy of the facility's unique identifier and operational parameters. When third parties access the digital twin remotely, they are working with accurate, pre-verified data that cannot be confused with other facilities. This copying approach ensures measurement precision and access accuracy by eliminating any ambiguity in facility identification.
3Reliability
If physical cable connection is established for third-party data access, then security is improved, but productivity deteriorates
Solution Approach 1:
The data-transmission interface serves as a secure intermediary that maintains the security benefits of physical connections while enabling remote access. The interface processes and secures all data transmissions over the network, providing the same security level as physical cable connections would offer, but without requiring third parties to travel to the facility location. This eliminates time losses associated with physical presence while maintaining security through encrypted and protocol-controlled communication channels.
Solution Approach 2:
The patent replaces the mechanical requirement of physical cable connection and on-site presence with an electronic/network-based system. The data-transmission interface handles all data exchange electronically through the network, substituting the need for physical travel and manual cable connection with automated digital communication. This increases productivity by allowing instantaneous remote access while the interface maintains security through protocol control and authentication mechanisms.
Data Source
AI summary
The system described herein relates to providing data access to a technical facility, in particular a machine and/or an installation, where the technical facility is connected to a data-processing device via a network using a data-transmission interface. Using the data-processing device, a digital twin of the technical facility is provided. The digital twin represents modifiable software components of the technical facility. A specific UUID is allocated to each of the digital twin and the technical facility. Communication between the digital twin and the technical facility is made possible via the network using the UUID. The data-processing device provides an access option for access by third parties to data of the digital twin that relate to software components of the technical facility that are represented by the digital twin.