Industrial HMI Access via Mobile Credentials and Proximity Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing industrial automation systems lack efficient and secure access methods, particularly for external personnel in emergency situations, with current authentication methods being prone to errors, security vulnerabilities, and inadequate ergonomic interfaces for situation-specific information and input.
Innovation Solution
A method utilizing a mobile device to generate and transmit specific access information and situation-specific data to operators, allowing secure and situation-aware access to industrial automation components, enabling multi-factor authentication and enhanced ergonomics through wireless communication and biometric verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods (passwords, ID cards) are used, then access control is implemented, but security vulnerabilities and operational inefficiencies arise
Solution Approach 1:
The patent replaces traditional mechanical authentication systems (physical ID cards, keyboards, mice) with a mobile device-based system using wireless communication (RFID/NFC). The mobile device stores access credentials and communicates with the automation component's radio unit, eliminating the need for physical card readers and additional input devices while improving both security and convenience
Solution Approach 2:
The mobile device serves multiple functions: it acts as an ID card for authentication, a display for showing situation-specific information, and an input device for transmitting commands to the automation component. This multi-functional approach consolidates multiple devices into one, improving ease of operation while maintaining security
2Ease of operation
If access information is stored on electronic ID cards, then authentication is enabled, but cards can be stolen, forgotten, or become invalid
Solution Approach 1:
The patent creates a digital copy of the access credential system by storing multiple access credentials in the mobile device's memory. Instead of relying on a single physical card, the system uses electronic storage that can hold multiple credentials and manage their validity periods, reducing the risk of loss or theft while maintaining authentication capability
Solution Approach 2:
The system performs preliminary actions by automatically generating and transmitting situation-specific information and access credentials to the mobile device before the operator arrives at the automation component. This includes pre-configuring the appropriate access rights based on the current operating state, so the operator is ready to authenticate immediately upon arrival
3Adaptability or versatility
If automation components have fixed interfaces, then they are adequate for daily operation, but they cannot provide enhanced ergonomics for alarm or maintenance situations
Solution Approach 1:
The patent makes the interface dynamic by adapting the situation-specific information displayed on the mobile device based on the current operating state of the automation component. The system dynamically selects and presents relevant information (such as alarm details, maintenance instructions, or operational parameters) according to the context, providing enhanced ergonomics without adding physical complexity to the automation component itself
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Facilitates secure, efficient, and situation-specific access for external personnel, improving operational efficiency and security by leveraging mobile devices for authentication and data exchange, while ensuring restricted access and integrated security measures.
Implementation Method 1
the automation component is equipped with a radio unit for receiving wirelessly transmitted access information
Data Source
Figure 1
Figure 2
AI summary
The invention relates to a method and an arrangement for secure access to an industrial automation component (HMI) by means of a mobile device (SD), wherein the automation component (HMI) is locked to prevent unauthorized access, wherein valid access information (CR) is stored on the mobile device (SD) and, when the device is in close proximity to the automation component, is transmitted to a radio unit (RFU) and checked in the automation component (HMI), and then the automation component (HMI) is released for access.In a first step, at least one operator (OP) responsible for a current operating state is selected; in a second step, access information (CR) personalized for the selected operator (OP) is selected or created; in a third step, specific information about the operating state and the valid access information (CR) is transferred to the operator's (OP) mobile device (SD); and in a fourth step, the operator (OP) gains access to the automation component (HMI) using the access information (CR) and performs inputs or other operating actions on the automation component (HMI) using the specific information via the mobile device (SD).This method allows an operator, particularly in service situations, to gain situation-specific access to the affected automation component, receive the necessary information, and authenticate and operate the automation component using their personal mobile device.