Field Measuring Device Web Access with Dual Authenticity Checks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Field measuring devices in process technology face challenges in securing communication interfaces against unauthorized access, as existing CAPTCHA functionalities are difficult to implement and do not effectively prevent human or machine-based unauthorized access.
Innovation Solution
Implementing a dual authenticity check system that verifies access rights through multiple identification categories, including individual, material, and biometric features, ensuring that only authorized communication can proceed via the web server interface.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a web server with communication interface is added to enable modern data exchange, then ease of operation and data transmission capability are improved, but security against unauthorized access deteriorates
Solution Approach 1:
The system performs preliminary authenticity checks (first and second checks with different authentication methods) before allowing any data exchange operations. This preventive authentication mechanism ensures that only verified users can access the web server interface, addressing the security vulnerability before it can be exploited.
Solution Approach 2:
The web server acts as an intermediary layer between the external communication interface and the field measuring device's internal functions. This intermediary enforces authentication protocols and controls access to parameterization, calibration, and diagnostic functions, preventing direct unauthorized access while maintaining modern communication capabilities.
2Reliability
If CAPTCHA functionality is implemented to distinguish human from machine access, then security against automated attacks is improved, but device complexity and implementation difficulty increase
Solution Approach 1:
The system changes the authentication parameter from simple CAPTCHA challenges to a multi-layered authentication scheme using different authentication methods (e.g., password, certificate, biometric). This parameter change provides robust security against both human and automated attacks while maintaining implementation feasibility within the field device's hardware constraints.
3Reliability
If fieldbus interface is used for measurement data transmission, then security and reliability are improved, but transmission rate and functionality remain limited
Solution Approach 1:
The system segments communication functions into two separate interfaces: the fieldbus interface dedicated to reliable measurement data transmission, and the web-based communication interface for modern data exchange and device configuration. This segmentation allows each interface to optimize for its specific purpose without compromising the other's performance or security.
Solution Approach 2:
The field measuring device implements multi-functionality by supporting both traditional fieldbus communication for measurement data and modern web-based communication for device management. This universal approach allows the device to maintain reliable measurement transmission while also enabling high-speed configuration, diagnostics, and parameter updates through the web interface.
Data Source
AI summary
A method for secure communication with a field measuring device of process measuring technology is described and shown. Upon contact by an external communication means with a web server via a communication interface, a first authenticity check of an external communication means is carried out by the field measuring device and a second authenticity check of the external communication means is carried out. After successful completion of the first authenticity check and the second authenticity check, further communication of the external communication means with the web server is authorized by the field measuring device.