Field Device Verification With Manufacturer and Customer Signatures
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for validating field devices in automation systems are time-consuming and inefficient, making it difficult to detect unauthorized modifications or ensure the integrity of original components, particularly in systems with numerous devices.
Innovation Solution
A method using cryptographic signatures, specifically a first signature from the manufacturer to identify the original state and a second signature from the customer to verify adaptations, ensures the integrity and intended state of field devices, employing an asymmetric cryptosystem for secure and automated validation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a complex comparison procedure is used to validate field devices, then the integrity of original components can be verified, but the validation process becomes extremely time-consuming and difficult to perform at scale
Solution Approach 1:
The patent extracts the essential validation information into a compact cryptographic signature that can be quickly verified. Instead of comparing entire configuration datasets, the system extracts critical integrity information and represents it in a condensed cryptographic form that enables rapid verification without time-consuming full comparisons
Solution Approach 2:
The patent transforms the validation approach by changing the parameter representation from detailed configuration data to cryptographic hash values and digital signatures. This parameter transformation enables verification to be performed on compact mathematical representations rather than large configuration datasets, dramatically reducing validation time while maintaining reliability
2Reliability
If traditional validation methods are used, then manipulation detection is attempted, but the method is too complex and time-consuming to be performed regularly or at all
Solution Approach 1:
The patent replaces the mechanical/manual comparison procedure with an automated cryptographic verification system. The complex manual process of comparing configuration parameters is substituted with automated digital signature verification using public key infrastructure, which can be performed by software without human intervention, thereby reducing procedural complexity and enabling regular automated validation
Solution Approach 2:
The field device performs self-validation by internally verifying its own cryptographic signatures and configuration integrity. The device autonomously checks whether its current state matches the signed original state without requiring external validation tools or complex external procedures, thereby simplifying the overall validation system
3Reliability
If no validation method is used, then the system remains simple and fast, but unauthorized modifications cannot be detected
Solution Approach 1:
The patent applies preliminary action by pre-signing the original configuration state with a digital signature before any potential manipulation can occur. This advance cryptographic sealing of the original state enables later verification without requiring complex validation procedures at the time of checking, thus maintaining high productivity while ensuring security
Data Source
AI summary
A method for validating a field device is disclosed. The field device includes a plurality of hardware and software modules and is provided with a first cryptographic signature on the manufacturer side. The first cryptographic signature identifies the device manufacturer or the original delivery state of the field device. The origin and integrity of the field device is validated on the customer side using the first cryptographic signature. Once the field device is adapted to a defined machinery, the field device is provided with a second cryptographic signature on the customer side. The second cryptographic signature identifies the adaptations of the field device made on the customer side as a machinery-specific desired state of the field device. At least one validation of the field device is carried out on the customer side using the second cryptographic signature during the period of installation of the field device in the defined machinery.