IED User Authentication Module for Secure Access Control

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Intelligent electronic devices (IEDs) such as digital power and energy meters lack effective authentication mechanisms to prevent unauthorized access, which can lead to incorrect or corrupted data and potential damage, necessitating improved security features to protect operational features from unauthorized personnel.

Innovation Solution

Incorporating a user authentication module with biometric sensors, ID card readers, and communication modules that authenticate users and prevent unauthorized access, while also featuring an image capture module to transmit images upon tamper triggers or authentication failures for enhanced security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional access control methods are used in IEDs, then device complexity is reduced, but security against unauthorized access is insufficient

Engineering Contradiction:
ImprovesecurityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The authentication system is segmented into multiple independent components: biometric sensor for identity verification, database module for storing authentication data, and access control module for granting permissions. This segmentation allows each component to perform its specific function efficiently while maintaining overall system security without excessive complexity.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

A biometric authentication module is introduced as an intermediary between the user and the IED's operational features. This intermediary verifies user identity through biometric data comparison before allowing access, providing enhanced security without requiring complex manual authentication procedures.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If biometric authentication modules are added to IEDs, then unauthorized access is prevented, but device complexity increases

Engineering Contradiction:
Improveaccess controlVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The biometric authentication module is designed to serve multiple functions: identifying users, verifying credentials, and controlling access to different operational features. This multi-functionality reduces the need for separate authentication mechanisms for different access levels, thereby managing complexity while enhancing security.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Reliability

If image capture and transmission capabilities are added, then tamper detection is enhanced, but energy consumption increases

Engineering Contradiction:
Improvetamper detectionVSAvoidenergy consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The image capture and transmission system operates periodically or event-triggered rather than continuously. Images are captured at scheduled intervals or when specific events occur (such as authentication attempts or tamper detection), reducing energy consumption while maintaining effective monitoring and detection capabilities.

Inventive Principle:
Principle #19Periodic action

Data Source

PatentUS20240195944A1Intelligent electronic device having user-authenticating capabilities
Publication Date: 2024.06.13 ELECTRO INDUSTRIES GAUGE TECH
  • US20240195944A1 patent drawing
  • US20240195944A1 patent drawing
  • US20240195944A1 patent drawing

AI summary

Devices, systems and methods for authenticating a user of an intelligent electronic device (IED) using dual factor authentication is provided. The present disclosure provides for receiving user credentials at an IED, determining a user and a preferred mode of communication based on the user credentials, sending a code to the user via the preferred mode of communication and receiving the code entered at the IED. Upon matching the generated code to the received code, access is granted to features of the IED. Additionally, the present disclosure provides for receiving user credentials at a remote server, determining a user and a preferred mode of communication based on the user credentials, sending a code to the user via the preferred mode of communication, receiving the code entered at the remote server, and providing remote access via a network to an IED by authenticating a user remotely.