Field Device Access Control by Operating Phase Authorization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Field devices in automation technology often have permanent, unprotected access, allowing authorized users to inadvertently or intentionally manipulate devices beyond the scope of their work orders, leading to operational safety issues.
Innovation Solution
Implementing a field device with defined operating phases and corresponding authorization information items that change dynamically, ensuring only permitted actions can be performed by authorized users during specific phases, with access control via sensors, actuators, and electronics units.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If permanent access to field device is provided with user management and access control, then authorized users can operate the field device, but users can inadvertently or intentionally manipulate the field device beyond the scope of their work order
Solution Approach 1:
The patent implements dynamic access control by defining multiple operating phases (e.g., calibration phase, measurement phase, maintenance phase) where authorization information items change depending on the current phase. This allows the field device to dynamically adjust which users can access which functions at different times, preventing users from performing actions outside their authorized scope while maintaining ease of operation during permitted phases
Solution Approach 2:
The patent segments the field device operation into distinct operating phases, each with its own set of authorization information items. By dividing the operational space into discrete phases with specific access rules, the system provides structured access control that enables legitimate operations while preventing unauthorized manipulations across phase boundaries
2Adaptability or versatility
If access rights are permanently available to configured users, then users can operate the device according to their rights, but access rights cannot be changed for specific work orders
Solution Approach 1:
The patent makes the access control system dynamic by associating different sets of authorization information items with different operating phases. The system automatically adapts access rights based on the current phase context, eliminating the need for complex manual reconfiguration while providing flexible, work-order-specific access control
Solution Approach 2:
The patent implements preliminary action by pre-defining multiple operating phases with their respective authorization information items before operation begins. This allows the system to automatically apply the correct access rights when transitioning between phases, simplifying the access control mechanism while maintaining high adaptability to different work scenarios
Data Source
AI summary
The invention relates to a field device of automation technology, wherein the field device has at least one sensor designed to detect a physical, chemical, or biological variable of a process engineering process and/or at least one actuator designed to influence a physical variable of a process engineering process, or such a sensor and/or actuator is assigned to the field device, wherein the field device has at least one electronics unit for operating the field device, wherein at least two operating phases are defined in the field device, wherein one or more authorization information items are assigned to each of the operating phases, wherein the authorization information items define at least one user authorized to access the field device and/or at least one permitted operating action on the field device, and wherein the electronics unit is designed to operate the field device in a current operating phase, wherein the current operating phase is one of the defined operating phases, as well as to a method for safe operation of such a field device.