IoT Security Function Selection for Continuous Automation Operation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In industrial environments, implementing security guidelines on IoT devices can impair ongoing operations due to potential delays and safety risks, making it difficult to enforce security policies without disrupting regular processes.

Innovation Solution

A method for operating networked IoT devices in automation networks that dynamically selects security functions based on device states, allowing continuous operation without disrupting productivity by using a database of security measures tailored to the device's current state.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If security measures are implemented on IoT devices, then security protection is improved, but productivity deteriorates due to process interruptions and delays

Engineering Contradiction:
ImprovesecurityVSAvoidproductivity
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system dynamically selects security functions based on current device state and operational context. Rather than enforcing security measures uniformly, the system adapts security enforcement to match current productivity requirements and operational priorities, allowing critical processes to maintain high productivity while still receiving appropriate security protection.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent implements partial security enforcement by selecting specific security functions based on device state rather than applying all security measures uniformly. This partial action approach applies security protection where and when it is most needed, avoiding unnecessary security overhead that would reduce productivity while maintaining adequate security coverage.

Inventive Principle:
Principle #16Partial or excessive action

2Reliability

If encryption and security protocols are enforced on all terminals, then security is improved, but device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments security functions into multiple selectable options rather than implementing a single comprehensive security protocol on all devices. Different security functions are assigned to different device states and operational contexts, reducing the complexity burden on individual devices while maintaining overall system security through diversified security approaches.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system applies different security functions to different local contexts (device states, applications, communication environments). Rather than enforcing uniform security protocols across all terminals, each device receives security measures tailored to its specific operational context, reducing unnecessary complexity while maintaining appropriate security levels.

Inventive Principle:
Principle #3Local quality

Data Source

PatentUS20250238021A1Method for Operating a Networked IoT Device in an Automation Network, IoT Device, and Automation Network
Publication Date: 2025.07.24 SIEMENS AG
  • US20250238021A1 patent drawing

AI summary

Various embodiments of the teachings herein include a method for operating a networked IoT device in an automation network with an application and with a security guideline implemented on the IoT device with a security specification. An example includes: selecting a security function for the application on the basis of a device state of the IoT device; and operating the IoT device with the application with the security function.