I/O Interface Switching for Secure Maintenance Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing process control systems face challenges in efficiently setting and maintaining input-output apparatuses while ensuring security, as traditional methods like physical housing and password protection are cumbersome and vulnerable to unauthorized access or malware introduction.
Innovation Solution
An input-output apparatus with a switcher and control device that manages connections between different interfaces, allowing secure transitions between operational and maintenance modes, disabling access when necessary to prevent unauthorized changes or malware introduction.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If a maintenance port is provided in the input-output apparatus to allow setting device connection during system operation, then maintenance efficiency is improved, but security level deteriorates due to potential unauthorized access and malware introduction
Solution Approach 1:
The patent implements dynamic switching between operational mode and maintenance mode. The switcher component physically or logically connects or disconnects the maintenance port based on the current system state. In operational mode, the maintenance port is disconnected to prevent unauthorized access. When maintenance is required, the system transitions to maintenance mode, enabling the maintenance port connection. This dynamic state-dependent connectivity resolves the contradiction by providing maintenance access only when needed while maintaining security during normal operation.
2Reliability
If physical housing in cabinets with locking is used to prevent unauthorized access, then security level is improved, but device complexity and cost increase due to requiring several hundred cabinets
Solution Approach 1:
The patent extracts the security function from the physical cabinet structure and relocates it to the input-output apparatus itself through the switcher mechanism. Instead of relying on external physical barriers (cabinets with locks), the security control is embedded within the device's own architecture. The switcher automatically manages connection states based on operational mode, providing security without requiring extensive physical infrastructure. This extraction principle reduces system complexity while maintaining security.
3Reliability
If password protection is set for maintenance ports, then security level is improved, but ease of operation deteriorates due to cumbersome password management across multiple ports
Solution Approach 1:
The patent replaces the software-based password protection mechanism with a hardware-based switcher mechanism that automatically controls maintenance port connectivity. Instead of relying on users to remember and input passwords correctly, the switcher provides automatic mechanical/electrical connection control based on the system's operational state. This substitution eliminates password management complexity while maintaining security, as the maintenance port is physically or logically disconnected during operational mode regardless of authentication status.
Data Source
AI summary
An input-output apparatus is provided. The apparatus includes a lower-level layer interface connected to a field device, a higher-layer interface connected to a controller, a maintenance interface connected to a setting apparatus, a switch, and a control device. The switch switches between a first connection and a second connection. The control device, in an engineering mode, permits the switch to transition freely between the first connection and the second connection, and in an operation mode, controls the switch to switch to the first connection and prohibits communication through the maintenance interface. In response to a permission command received through the higher-level layer interface, the control device permits communication through the maintenance interface, and in response to a connection request received through the maintenance interface when the control device permits communication with the maintenance interface, the control device controls the switch to switch from the first connection to the second connection.