Digital Twin Access Matrix for Industrial Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional systems lack the ability to monitor and manage access to data of digital twins across multiple devices in industrial systems, as well as track the state of digital twins throughout their lifecycle, leading to insecure data access and inefficient task management.
Innovation Solution
A method and system that determine the state of digital twin datasets and map user roles to generate an access matrix, ensuring secure access to data based on user roles and providing notifications and task updates, thereby simplifying access and task management across hierarchical levels.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If conventional systems allow any user to access digital twin data stored in multiple devices, then ease of operation is improved, but data security deteriorates
Solution Approach 1:
The system segments access control by dividing the user base into different roles (operator, technician, manager, etc.) and assigning specific access rights to each role. The access matrix further segments control by mapping roles to specific digital twin states (design, operation, maintenance, etc.), ensuring that users only access data appropriate to their function while maintaining overall system accessibility.
Solution Approach 2:
The patent introduces an intermediary access control system that sits between users and digital twin data. This intermediary layer includes role definition modules, state determination modules, and access matrix generation that mediate all access requests, thereby securing data while allowing legitimate operations through the controlled intermediary layer.
2Adaptability or versatility
If conventional systems store digital twin data across multiple devices in hierarchical levels, then adaptability is improved, but device complexity deteriorates
Solution Approach 1:
The access control system is designed as a universal solution that works across all hierarchical levels and device types in the industrial internet of things architecture. The role-based access control and state mapping mechanisms provide multi-functional capability, managing access for various user types (operators, technicians, managers) across different digital twin states (design, operation, maintenance, commissioning, validation) through a single unified system.
Solution Approach 2:
The patent introduces an intermediary access control system that sits between users and digital twin data. This intermediary layer includes role definition modules, state determination modules, and access matrix generation that mediate all access requests, thereby securing data while allowing legitimate operations through the controlled intermediary layer.
3Productivity
If conventional systems lack state monitoring capability, then device complexity is reduced, but task management efficiency deteriorates
Solution Approach 1:
The system implements feedback mechanisms by continuously monitoring the state of digital twins and using this information to dynamically control access. The state determination module receives feedback about digital twin states (design, operation, maintenance, commissioning, validation) and adjusts access permissions accordingly, enabling efficient task management through state-aware access control.
Solution Approach 2:
The access control system performs preliminary actions by pre-defining roles and their associated access rights before users attempt to access digital twin data. The access matrix is generated in advance by mapping roles to digital twin states, so that when access requests occur, the system can quickly determine permissions without complex real-time analysis, improving task management efficiency.
Data Source
AI summary
A system and method for managing access to data of digital twin in industrial system includes one or more datasets of the digital twin being received from each of a plurality of devices of a hierarchical system. A state of the digital twin is determined by mapping each of the one or more datasets with pre-defined state data. Information related to a role of each of one or more users associated with each of a plurality of devices is received, and an matrix indicating the one or more users' access rights on one or more datasets is generated by mapping a state of the digital twin corresponding to each of the one or more datasets with the users' role in each. Access to one or more datasets by one or more users at each of the plurality of devices is managed based on the access matrix.