Isolated User and Security Computing Units for Abnormal Operation Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing control systems in vehicles, robots, railways, and aerospace are vulnerable to abnormal operations due to misuse of normal functions by artificial intelligence or control system operators, leading to instability and potential accidents or malfunctions.
Innovation Solution
A control system architecture featuring an isolated user computing unit and a security computing unit, where the security computing unit monitors and analyzes the input and output data to prevent abnormal operations by comparing system check information with predefined standards and taking appropriate security actions to restore normal system state.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a control program is executed in a general-purpose computer with standard architecture, then ease of operation and adaptability are improved, but system stability and security are worsened due to vulnerability to hacking and abnormal operations
Solution Approach 1:
The control system is divided into two independent computing units: a user computing unit for executing control programs and a security computing unit for monitoring and security functions. This segmentation isolates the control logic from security monitoring, allowing the system to maintain ease of operation while improving stability through independent security verification.
Solution Approach 2:
The security computing unit acts as an intermediary between the user computing unit and the controlled devices. It receives control signals from the user computing unit, verifies their legitimacy through system check information, and only permits execution if security conditions are met. This intermediary layer prevents hacking and abnormal operations while allowing normal control functions to operate.
2Reliability
If redundancy and voting technology are used to prevent hardware malfunction, then system reliability is improved, but device complexity increases
Solution Approach 1:
The patent replaces complex mechanical redundancy systems with a software-based security monitoring approach. Instead of using multiple hardware components for voting and redundancy, the security computing unit uses software algorithms to verify control signal legitimacy, reducing hardware complexity while maintaining or improving system reliability.
Solution Approach 2:
The system changes the verification parameter from hardware-level redundancy to software-level security check information. By transforming the reliability mechanism from physical redundancy to information-based verification, the system achieves high reliability without the complexity of multiple hardware paths.
3Reliability
If interlocking methods are used to prevent abnormal operations, then operational safety is improved, but adaptability to abnormal situations worsens
Solution Approach 1:
The security computing unit dynamically adjusts security monitoring based on real-time system state information. Rather than using static interlocking rules, the system can adapt its security verification process to different operational conditions, allowing it to respond flexibly to various abnormal situations while maintaining safety through continuous monitoring.
Solution Approach 2:
The system implements feedback through continuous monitoring of system state information and control signals. The security computing unit receives feedback about the actual system state and compares it with expected behavior, allowing adaptive response to abnormal situations. This feedback mechanism enables the system to learn from operational context and adjust security measures accordingly.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention relates to a control system for monitoring and taking action on security, abnormal situations, abnormal operations, and the like in various fields. The present control system includes a user computing unit and a secure computing unit. The user computing unit includes its own CPU and generates control information by executing a user program. The secure computing unit includes its own CPU and again checks input information inputted from a device to be controlled and the control information generated by the user computing unit to generate system check information. The system check information is compared with system state determination standard information preset by a user, and when the system state is within a normal range, the control information is outputted as it is, and when the system state is not within the normal range, the user takes a preset appropriate security action.