Dual-Layer Password Wireless Industrial Control Interface

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Industrial control systems face security and identification accuracy issues due to the vulnerability of wireless networking, where users may inadvertently access incorrect entities or functionalities within the system, especially with portable user interfaces that provide common access to all functionalities, leading to potential misuse by untrained or unauthorized users.

Innovation Solution

A wireless user interface system that includes a motor drive with a first password and a wireless interface module with a second password, prompting users for both passwords to establish a secure connection, ensuring exclusive access and preventing unauthorized access by using proprietary message protocols like Bluetooth and DPI/DSI, thereby enhancing security and reliability.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a common portable user interface is provided with common functionality for accessing all entities in the industrial control system, then ease of operation is improved, but security and identification accuracy deteriorate

Engineering Contradiction:
Improveease of operationVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent divides the access control mechanism into multiple segments: a first password for wireless connection establishment and a second password for entity access authorization. This segmentation allows the system to maintain a common portable user interface for ease of operation while implementing layered security to prevent unauthorized access and improve identification accuracy.

Inventive Principle:
Principle #1Segmentation

2Ease of operation

If wireless networking is used to allow remote access to industrial control entities, then ease of operation is improved, but security and identification accuracy deteriorate

Engineering Contradiction:
Improveease of operationVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent implements preliminary security actions by requiring establishment of a wireless connection using a first password before any entity access can occur. This preliminary authentication step creates a secure foundation that enables remote wireless access while maintaining security controls, resolving the contradiction between operational ease and security.

Inventive Principle:
Principle #10Preliminary action

3Measurement precision

If hardwired connections are required to guard against identification errors, then identification accuracy is improved, but ease of operation deteriorates

Engineering Contradiction:
Improveidentification accuracyVSAvoidease of operation
Core Design Contradiction:
Measurement precisionVSEase of operation

Solution Approach 1:

The patent introduces a second password as an intermediary authentication mechanism that operates over the wireless connection. This intermediary security layer maintains identification accuracy by requiring explicit authorization for entity access while allowing the convenience of wireless connections, eliminating the need for hardwired connections.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS7636030B2Security layers for wireless industrial control user interface
Publication Date: 2009.12.22 ROCKWELL AUTOMATION TECH INC
  • US7636030B2 patent drawing
  • US7636030B2 patent drawing
  • US7636030B2 patent drawing

AI summary

A wireless user interface is operable to interface with an industrial control system including a device operable to store a first password and a wireless interface module operable to store a second password. The wireless user interface includes a processing unit operable to prompt a user for the first and second passwords, connect to the wireless interface module using the second password, and establish a first connection through the wireless interface module to access the device using the second password.