Elevator Safety Controller Authentication via Gateway Mediation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing elevator systems lack robust authentication mechanisms for computing devices accessing safety controllers, posing a security risk as unauthorized personnel can compromise the safety and operation of the elevator system.
Innovation Solution
Implementing a two-stage authentication process using a gateway device that verifies first and second authentication information, ensuring only authorized personnel can access and control or modify the safety controller, without establishing a direct communication link with the safety controller.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a two-stage authentication process is implemented via a gateway device, then security of the safety controller is improved, but device complexity increases
Solution Approach 1:
A gateway device is introduced as an intermediary between the computing device and the safety controller. The gateway receives authentication information from the computing device, forwards it to the safety controller, and relays commands back. This mediator approach enhances security by adding an authentication layer without requiring direct communication between the computing device and safety controller, thus improving reliability while managing complexity through a dedicated intermediary component.
2Reliability
If authentication information is transmitted via a gateway device, then security is improved, but communication time increases
Solution Approach 1:
The gateway device is pre-configured with the public key of the safety controller and maintains a ready-state authentication mechanism. When a computing device seeks to connect, the gateway can immediately begin the authentication process using pre-established cryptographic parameters, rather than setting up security protocols from scratch. This preliminary preparation reduces the time penalty associated with the enhanced security measures.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
An elevator system includes a gateway device (60) and a safety controller (52) arranged to monitor at least one safety condition of the elevator system. The gateway device (60) is configured to enable a computing device (64) to establish a connection with the gateway device (60). The safety controller (52) is configured to: receive first authentication information (600) from the gateway device (60), wherein the first authentication information (600) is gateway authentication information (600); check whether the gateway authentication information (600) meets a first authentication condition; if the gateway authentication information (600) meets the first authentication condition, receive from the computing device (64), via the gateway device (60), second authentication information (640); check whether the second authentication information (640) meets a second authentication condition; and if the second authentication information (640) meets the second authentication condition, authenticate the computing device (64), wherein the authenticated computing device (64) is granted maintenance access to the safety controller (52) including permission to control and/or modify an operation of the safety controller (52).