Foundation Fieldbus Gateway Write Protection via Virtual Addressing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional asset management systems (AMSs) are limited in their ability to communicate with Foundation Fieldbus linking devices, typically only supporting direct communication via a single Fieldbus Ethernet network and a limited number of devices, and lack effective write protection mechanisms for these devices.
Innovation Solution
A gateway device is introduced to facilitate communication with multiple Foundation Fieldbus linking devices by using virtual addresses, enabling enhanced communication capabilities and write protection by determining the type of command within messages and generating exceptions for write operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If conventional AMSs communicate directly with Foundation Fieldbus linking devices via a single Fieldbus Ethernet network, then communication is simple and direct, but the number of devices that can be communicated with is limited (up to eight linking devices)
Solution Approach 1:
The patent introduces a gateway device as an intermediary between the AMS and multiple Foundation Fieldbus linking devices. The gateway receives messages from the AMS, determines whether they are write commands, and either blocks or forwards them to the appropriate linking devices. This mediator enables the AMS to communicate with more than eight linking devices by expanding the network architecture while maintaining simple AMS operation.
2Reliability
If AMSs are allowed to configure Foundation Fieldbus Linking devices, then device configuration flexibility is improved, but device security and stability deteriorate due to unauthorized or erroneous writes
Solution Approach 1:
The gateway acts as an intermediary that filters write commands between the AMS and linking devices. It receives messages from the AMS, determines whether they contain write commands, and either blocks or forwards them based on this determination. This allows the system to maintain configuration stability while preserving necessary configuration capabilities through controlled access.
Solution Approach 2:
The gateway performs preliminary analysis of incoming messages to identify write commands before they reach the linking devices. By determining in advance whether a message contains a write command and blocking such commands preemptively, the system prevents unauthorized or erroneous writes while allowing legitimate configuration operations to proceed through the gateway's controlled interface.
Data Source
Figure 1
Figure 2A~2B
Figure 2C
AI summary
Systems (100) and methods (700) for write protecting Foundation Fieldbus linking devices (115) are described. A message output by an external system (125) for communication to a Foundation Fieldbus linking device (115) may be received (705) by a gateway device (105). The linking device (115) may be identified by a virtual address included in the received message. The gateway device (105) may determine (715) whether the message includes a command to write data to the linking device (115) or a Foundation Fieldbus device (120) connected to the linking device (115). If it is determined that the message does not include a command to write data, then the gateway device (105) may direct (725) communication of the message to the linking device (115). If, however, it is determined that the message includes a command to write data, the gateway device (105) may generate (720) an exception for preventing the requested write operation.