IoT Gateway Function Separation for Safe Equipment Actuation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing IoT applications often inadvertently perform undesirable actions due to coding mistakes or processing errors, leading to issues like production loss or damage to machines, as they lack separation between read and write access functions.
Innovation Solution
Implementing a framework that separates sensing functions for read-only access and actuating functions for write-only access, using IoT gateways to manage communication and ensure that only supported actions are executed on IoT devices, thereby minimizing errors and preventing unintended machine operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If IoT applications are given full access to perform both read and write operations on devices, then the applications can fully control device operations, but the risk of unintended actions increases due to coding mistakes or processing errors
Solution Approach 1:
The patent segments device access into two distinct functions: sensing functions for read-only operations and actuating functions for write-only operations. This separation ensures that applications cannot inadvertently perform unintended actions by restricting each function type to its designated operation mode, thereby resolving the contradiction between full control capability and operational safety
Solution Approach 2:
The patent introduces an intermediary layer (the gateway or service) that mediates between applications and IoT devices. This intermediary enforces the separation of sensing and actuating functions, validating and controlling all access requests to prevent coding mistakes from causing harmful actions, thus maintaining both versatility and reliability
2Speed
If IoT applications can directly execute write commands on devices, then the applications can quickly respond to conditions, but coding errors can cause undesirable actions such as unintended machine shutdowns
Solution Approach 1:
By segmenting write access into dedicated actuating functions that are separately managed and validated, the system maintains fast response capability through direct actuating function execution while preventing harmful actions through the enforced separation that eliminates erroneous write commands from general application logic
Solution Approach 2:
The system performs preliminary validation and configuration of actuating functions before they can execute actions on devices. This preliminary setup ensures that only properly authorized and validated actuating functions can perform write operations, preventing coding errors from causing harmful effects while maintaining rapid response when valid conditions are met
Data Source
AI summary
An IoT gateway at a client site uses sensing functions and actuating functions to safely implement actions for equipment. The client provides, to the IoT service, specifications for a sensing function and one or more actuating functions that are to communicate with the sensing function. The functions are deployed to the IoT gateway at the client site. The sensing function may be assigned read only access to the equipment and the actuating function may be assigned write only access to the equipment. The sensing function may collect data from the equipment and determine that a condition has been met (e.g., temperature is above an upper limit). In response, the sensing function provides an indication of an action to the actuating function (e.g., via a unique topic). If the action is a supported action, then the actuating function causes the equipment to perform the action; otherwise, it ignores the indicated action.