EEPROM Authentication for Firmware-Free Automation Components

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Industrial automation systems face challenges in authenticating components that lack firmware, microprocessors, or microcontrollers, as existing authentication methods are not applicable to these components, posing risks from counterfeit, stolen, or modified parts.

Innovation Solution

Equipping industrial automation components with electrically erasable programmable read-only memories (EEPROMs) that store identifying information, which can be read by the system to authenticate components, even in the absence of processors or microcontrollers, using backplane switches and I/O components to verify the authenticity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If authentication certificates are used with firmware, microcontrollers, and microprocessors, then authentication capability is improved, but components without these elements cannot be authenticated

Engineering Contradiction:
Improveauthentication capabilityVSAvoidapplicability to components without firmware/microcontrollers
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent extracts the authentication capability from the firmware/microcontroller context and implements it directly in hardware using EEPROM memory. The authentication certificate is stored in the EEPROM chip itself, allowing authentication to occur without requiring a microcontroller or firmware to mediate the process. This enables components without processors to be authenticated.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces an intermediary authentication mechanism that bridges components without microcontrollers and the authentication system. The EEPROM stores authentication certificates and communicates with the controller through standard memory interfaces, serving as an intermediary that enables authentication for simple components while maintaining compatibility with existing system architecture.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of manufacture

If components are procured from unauthorized sources to reduce costs, then cost is reduced, but system security and component authenticity are compromised

Engineering Contradiction:
Improvecost reductionVSAvoidcounterfeit and unauthorized components
Core Design Contradiction:
Ease of manufactureVSObject-affected harmful factors

Solution Approach 1:

The patent implements preliminary authentication by storing authentication certificates in the EEPROM during manufacturing. This preliminary action enables the component to prove its authenticity before being installed in the system, allowing the controller to verify legitimacy and reject counterfeit components before they can cause harm.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent establishes a feedback mechanism where the controller reads authentication certificates from EEPROM and verifies component legitimacy. This feedback loop provides continuous verification of component authenticity, enabling the system to detect and reject unauthorized components while maintaining operation with legitimate ones.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS12038741B2Systems and methods for authenticating industrial automation components
Publication Date: 2024.07.16 ROCKWELL AUTOMATION TECH INC
  • US12038741B2 patent drawing
  • US12038741B2 patent drawing
  • US12038741B2 patent drawing

AI summary

A first component of an industrial automation system includes an electrically erasable programmable read-only memory (EEPROM) storing data identifying the first component. The data identifying the first component is read from the EEPROM by a second component to which the first component is communicatively coupled to authenticate the first component. The first component lacks a processor and a microcontroller, and does not run firmware.