IoT Authorization Module for Secure Plant Data Sharing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional information management systems in manufacturing plants lack control over data sharing and security, making them inefficient and costly for small-scale operations, especially when using complex systems or cloud-based solutions that require continuous support.

Innovation Solution

An Internet of Things (IoT) module is introduced to control data transfer between subsystems in a manufacturing plant, allowing authorized sharing of operational parameters through a plug-in installed in devices, using a plant network, and providing a user-friendly interface for operators to select and manage data sharing, ensuring data security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If all parameters of a subsystem are shared with other subsystems in conventional systems, then coordination between subsystems is achieved, but data security is compromised and control over information sharing is lacking

Engineering Contradiction:
Improvecoordination between subsystemsVSAvoiddata security
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The system performs preliminary actions by establishing authorization rules and access control policies before data sharing occurs. The authorization module pre-configures which parameters can be shared between which subsystems, ensuring that data security is maintained from the outset rather than reacting to security issues after they arise.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The invention introduces an intermediary authorization module that sits between subsystems and controls data flow. This mediator verifies authorization requests, checks against predefined rules, and selectively permits or denies parameter sharing, thus maintaining both coordination and security without requiring all subsystems to directly share all parameters.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If complex systems with centralized cloud platforms are used for data sharing, then data security and control are improved, but system complexity and continuous support requirements increase

Engineering Contradiction:
Improvedata securityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system segments the authorization functionality into modular components distributed across different subsystems rather than relying on a single centralized cloud platform. Each subsystem has its own authorization module that can independently enforce security rules, reducing overall system complexity while maintaining security through distributed control.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The authorization module enables subsystems to self-manage their own data sharing permissions through predefined rules and policies. This self-service capability reduces the need for continuous external support and intervention, as the system can autonomously enforce security rules without requiring complex centralized management.

Inventive Principle:
Principle #25Self-service

3Adaptability or versatility

If dedicated software applications are used for coordination in small-scale manufacturing plants, then coordination functionality is achieved, but engineering efforts and costs increase

Engineering Contradiction:
Improvecoordination functionalityVSAvoidengineering efforts and costs
Core Design Contradiction:
Adaptability or versatilityVSEase of manufacture

Solution Approach 1:

The invention creates a universal authorization module that can be deployed across multiple different subsystems and applications without requiring separate dedicated software for each coordination scenario. This multi-functional approach allows small-scale manufacturing plants to achieve coordination functionality through a standardized, reusable component rather than custom-engineered solutions for each case.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system enables flexible configuration of authorization parameters and rules that can be adjusted to suit different coordination needs without changing the underlying software architecture. This parameter-based configurability allows the same core system to adapt to various coordination scenarios, reducing engineering efforts and costs for small-scale implementations.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS12050451B2Method of controlling data transfer in a manufacturing plant and a system thereof
Publication Date: 2024.07.30 ABB (SCHWEIZ) AG
  • US12050451B2 patent drawing
  • US12050451B2 patent drawing
  • US12050451B2 patent drawing

AI summary

In an embodiment, the present disclosure discloses a method and a module for controlling data transfer in a manufacturing plant. The IoT module is configured to receive a request for a plurality of parameters from a second application from one or more applications. The request is made by a first application from the one or more applications. The IoT module determines status of the requested parameters. The status indicates if the requested parameters are authorized for sharing. Further, the IoT module transfers only the authorized parameters to the first module based on the status. Thus, the present disclosure provides a method and a IoT module for sharing data securely within the manufacturing plant.