Location-Based Access Control for Portable Process Communicators
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In process control systems, operators face challenges such as increased errors due to confusion between similar devices, security risks from portable devices being taken outside designated areas, and difficulty in directing attention to automated messages, especially when using portable devices without visual confirmation of changes or location-based access control.
Innovation Solution
Implementing a system that uses location appliances and electronic tags to determine the precise geographic location of portable devices within a process control system, granting access to specific areas based on the operator's location and associating operators with devices only when within predefined distances, and routing events to operators based on their current location to ensure timely and accurate responses.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If operators use portable devices to access process control systems from any location, then mobility and flexibility are improved, but security risks increase due to potential access from unauthorized areas
Solution Approach 1:
The system dynamically adjusts access permissions based on the operator's real-time location. The portable device receives location information from multiple access points, and the system automatically grants or restricts access to different process control elements depending on whether the operator is in an authorized area, creating a dynamic security model that adapts to the operator's movement
Solution Approach 2:
The patent introduces an intermediary location determination system that acts as a mediator between the portable device and the process control system. This intermediary verifies the operator's location through multiple access points before allowing access, preventing direct unauthorized access while maintaining mobility for authorized operations
2Adaptability or versatility
If operators can access devices from remote locations using portable devices, then operational flexibility is improved, but error rates increase due to confusion between similar devices without visual confirmation
Solution Approach 1:
The system applies local quality by providing location-specific access permissions. When an operator is physically present at a particular device location, the system grants access only to that specific device and its associated control elements, not to all devices system-wide. This ensures operators can only interact with devices in their immediate physical vicinity, eliminating confusion between similar devices while maintaining operational flexibility
Solution Approach 2:
The patent segments the process control system into multiple location-based zones, each with its own access permissions. Instead of treating the system as a single accessible entity, it divides control authority into location-specific segments, allowing operators to access only the segment corresponding to their physical location, thereby preventing erroneous operations on distant or similar devices
3Adaptability or versatility
If the system provides comprehensive access to all process control elements, then operational versatility is improved, but system complexity and access control difficulty increase
Solution Approach 1:
The patent implements a universal location-based access control framework that automatically handles all access decisions across the entire process control system. A single location verification mechanism serves multiple purposes: security authentication, device identification, and permission management. This universal approach simplifies the access control structure compared to maintaining separate permission systems for each device or area, reducing overall system complexity while maintaining comprehensive operational versatility
Data Source
AI summary
An access control system for use in a process environment, the access control system comprising: a computer readable medium; and a first routine stored on the computer readable medium which, when executed by a processor, determines the geographic position of an authorized user operating a portable communicator within the process environment based on data received from one of the portable communicator or electronic location device carried by the authorized user;a second routine stored on the computer readable medium which, when executed by a processor, limits access of the authorized user to data within the process environment based on the determined geographic position of the portable communicator with respect to the plurality of control areas; and a third routine stored on the computer readable medium which, when executed by a processor, receives from a user of a portable communicator data indicative of the authorization level of the user.