Field Device Parameter Authorization via Comparative Control

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing field devices in process automation lack effective mechanisms to ensure that only authorized manufacturers and suppliers can utilize specific technologies, such as MEMOSENS, preventing unauthorized use of sensor elements and measuring transducers.

Innovation Solution

Implementing a system where each control/memory unit stores a parameter set with defined levels, allowing only the minimum common functionality to be shared between components, with a comparative control/storage unit ensuring that only licensed features are enabled by determining the lowest common level between connected units, thus restricting unauthorized access to advanced functionalities.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a field device allows multiple manufacturers to use the same technology platform, then device compatibility and ease of operation improve, but unauthorized use and security risks increase

Engineering Contradiction:
Improvedevice compatibilityVSAvoidauthorization security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent implements preliminary authorization by storing authentication data (MAC address, authorization key, authorization level) in the control/memory unit before the device is put into service. This preliminary configuration enables the device to automatically verify manufacturer credentials during operation, allowing multiple authorized manufacturers to use the platform while maintaining security through pre-established authentication mechanisms.

Inventive Principle:
Principle #10Preliminary action

2Adaptability or versatility

If advanced functionalities are made available to all components, then device versatility improves, but unauthorized access to sensitive functions increases

Engineering Contradiction:
Improvedevice functionalityVSAvoidfunctionality protection
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent applies local quality by assigning different authorization levels (level 1, level 2, etc.) to different manufacturers' components. Each control/memory unit stores specific authorization data that determines which functionalities are accessible. This creates localized access control where each manufacturer's device has tailored permissions - basic functionalities are available to all, while advanced functions are restricted to authorized manufacturers only, thus protecting sensitive capabilities while maintaining system versatility.

Inventive Principle:
Principle #3Local quality

3Reliability

If the system requires software updates or component exchanges to add new functionalities, then security control improves, but device complexity and loss of time increase

Engineering Contradiction:
Improvesecurity controlVSAvoidsystem configuration
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements dynamics by enabling flexible addition of new authorized manufacturers without system reconfiguration. When a new manufacturer joins, their authorization data (MAC address, authorization key, level) is simply added to the system's authorization database. The existing control/memory units automatically recognize and integrate these new authorized components through their communication interfaces, allowing the system to adapt dynamically to new participants without requiring software updates or structural changes, thus maintaining security while reducing complexity.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentEP2181323B1Field device for process automation
Publication Date: 2016.09.28 ENDRESS HAUSER CONDUCTA GMBH CO KG
  • EP2181323B1 patent drawingFigure 1~1b

AI summary

The invention relates to a field device (1) for process automation, comprising at least two components (2, 3, 6) which can be coupled to one another, wherein each of the components (2, 3, 6) is provided with a control/storage unit (8, 9, 10) which respectively stores a set of parameters (Pn where n = 1, 2, 3,..) containing defined parameters (A, B, C,...), and wherein, in the event of the at least two components (2, 3, 6) being coupled to one another, at least one of the control/storage units (8; 9; 10) reads the sets of parameters (P1, P2, P3) stored in the individual control/storage units (8, 9, 10) of the components (2, 3, 6) and compares them with one another, and wherein, in the event of a discrepancy in the sets of parameters (P1, P2, P3), the control/storage unit (8; 9; 10) which is carrying out the comparison provides the control/storage units (8, 9, 10) of the components (2, 3, 6) which are coupled to one another with the cut-set (S) of the parameters (A, B, C,..) in the sets of parameters (P1, P2, P3).