Industrial Device Configuration with Verified Change Approval Tickets
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for configuring and updating field devices in industrial systems face challenges such as insecure access interfaces, undocumented changes, and lack of automated control, leading to unsafe and unintended configurations.
Innovation Solution
A computer-implemented method using Verification of Request (VoR) mechanisms and cryptographically signed 'change approval tickets' to manage and secure device configurations, integrating with systems like MES and ERP to ensure secure, automated, and efficient updates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If multiple access interfaces (field bus, Bluetooth, embedded web servers, on-device buttons) are provided for device configuration, then ease of operation is improved, but security and control are worsened
Solution Approach 1:
The patent introduces a centralized configuration server as an intermediary between operators and field devices. All configuration changes must route through this server, which verifies authorization and manages the change process. This mediator maintains security control while still allowing multiple access methods (Bluetooth, web server, buttons) to function, as all their output funnels through the controlled server interface.
Solution Approach 2:
The system performs preliminary verification of authorization and configuration validity before applying changes. The configuration server checks proposed changes against authorization rules and system state before allowing modifications. This preliminary action prevents unauthorized or unsafe configurations from being applied, maintaining security while enabling easy access methods.
2Adaptability or versatility
If device parameters and firmware are updated freely, then adaptability is improved, but system safety is worsened due to unforeseen consequences
Solution Approach 1:
The configuration server implements feedback mechanisms that monitor device state before, during, and after configuration changes. The system verifies proposed changes against current device state and authorization rules, providing feedback on whether changes are safe and authorized. This feedback loop enables adaptability while preventing harmful configurations through continuous verification.
Solution Approach 2:
The system prepares and validates configuration changes before applying them to devices. The configuration server checks authorization, validates parameter values, and ensures changes are safe before allowing updates. This beforehand cushioning prevents unforeseen consequences by catching potential problems prior to implementation, while still allowing necessary adaptability.
3Ease of operation
If configuration changes are made without automated control, then ease of operation is improved, but productivity is worsened due to manual verification requirements
Solution Approach 1:
The configuration server provides self-service automation for configuration management. It automatically verifies authorization, validates changes, manages deployment, and updates documentation without requiring manual intervention for each step. This self-service approach maintains operational simplicity while dramatically improving productivity through automated verification and deployment processes.
Data Source
Figure 1~3
AI summary
The present invention relates to a computer-implemented method (100) for configurating at least one device (50) of a system (90), comprising the following steps: - Providing (102) first data (10) of the at least one device (50) related device-specific data of the at least one device (50); - Generating (104) at least a first maintenance job (15) describing a change request requirement applied on the at least one device (50) based on the first data (10); - Creating (106) at least a first approval ticket (17) based on a first verification check procedure (18) of the generated first maintenance job (15) of the at least one device (50); - Processing (112) the at least first maintenance job (25) with the at least first approval ticket (17) to perform the configuration of the at least one device (50).