Industrial Asset AR Authentication for Sensitive Component Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional augmented reality (AR) systems for controlling physical assets, such as industrial assets, lack safety features to ensure secure access to critical or sensitive components, particularly in harsh environments where human operators must wear personal protective equipment.
Innovation Solution
Implement an enhanced multifactor authentication (MFA) system using a local user device with a camera to display an interactive AR view of the asset, requiring biometric and personal knowledge factors, and a presence factor to authenticate users before allowing control of sensitive components.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If conventional AR systems are used to control physical assets, then operators can view asset information remotely without wearing PPE, but security and safety controls are insufficient for sensitive components
Solution Approach 1:
The patent segments the AR control system into multiple authentication layers: initial authentication for general asset viewing, and enhanced multifactor authentication specifically for sensitive components. This segmentation allows remote monitoring to remain easy while adding targeted security for critical areas.
Solution Approach 2:
The patent introduces an intermediary authentication system that mediates between the operator and sensitive components. The enhanced MFA system acts as a gatekeeper, verifying presence and identity before allowing control of sensitive assets, thus maintaining ease of operation for non-sensitive tasks while adding security where needed.
2Reliability
If enhanced multifactor authentication is implemented for sensitive components, then security is improved, but system complexity increases
Solution Approach 1:
The patent applies local quality by implementing enhanced MFA only at specific points of interaction with sensitive components, rather than uniformly across the entire AR system. The authentication complexity is localized to where it is most needed, keeping the overall system relatively simple while providing enhanced security where required.
Solution Approach 2:
The system performs preliminary authentication actions by verifying user presence and identity before allowing access to sensitive components. This preliminary check prevents unauthorized access while maintaining a straightforward interface for authorized users, reducing the perceived complexity during actual operation.
3Reliability
If physical access is required for controlling sensitive components, then security is enhanced, but operator safety is compromised in harsh environments
Solution Approach 1:
The patent replaces the mechanical requirement of physical presence with an electronic verification system. Instead of requiring operators to physically access sensitive components (which would expose them to harsh environmental conditions), the system uses enhanced MFA with presence verification to authenticate and authorize remote control, substituting physical security measures with digital verification while maintaining operator safety.
Data Source
AI summary
A method is provided for providing an interface via an AR display for an operator to interact with displayed interactive graphical elements (IGEs) corresponding to respective actual components of a physical asset, wherein the interface is configured for the operator to control a selected actual component using a corresponding IGE, determining, responsive to detected user interaction with the corresponding IGE, whether the selected controllable actual component is designated as sensitive, and responsive to a determination that the selected controllable actual component is designated as sensitive, requiring enhanced multifactor authentication (MFA) to establish that the local user is local to the asset using a first factor of the enhanced MFA and that the local user is authenticated using a second factor of the enhanced MFA, and allowing control of the sensitive actual component based on receipt of proof of authentication of the local user by the enhanced MFA.


