Modular Automation Access Control Using Process-Based Privileges

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Modular automation systems face challenges in detecting and mitigating malicious behavior due to their dynamic and heterogeneous nature, which increases the risk of compromised modules causing economic and physical damage.

Innovation Solution

An access control policy is generated based on privilege associations between processing steps and automation modules, allowing access only to privileged entities, using a central operating unit to enforce this policy and monitor denied access requests.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If modular automation systems use dynamic and heterogeneous modules for flexibility, then adaptability and versatility are improved, but device complexity and security risk increase

Engineering Contradiction:
ImproveflexibilityVSAvoidsystem complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The system segments automation functions into modular, standardized Module Type Packages (MTPs) that can be dynamically combined and recombined. Each module is self-contained with defined interfaces, allowing flexible reconfiguration without increasing overall system complexity. The segmentation enables independent validation and security management of each module type.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements universal standardized interfaces and communication protocols that allow different module types to interoperate through common mechanisms. This universality provides flexibility across heterogeneous modules while reducing complexity through standardized interaction patterns rather than custom integration for each module combination.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Adaptability or versatility

If communication paths are not pre-defined in modular systems, then adaptability is improved, but difficulty of detecting and measuring malicious behavior increases

Engineering Contradiction:
Improvedynamic reconfigurationVSAvoidmalicious behavior detection
Core Design Contradiction:
Adaptability or versatilityVSDifficulty of detecting and measuring

Solution Approach 1:

The system implements monitoring mechanisms that provide feedback on module communication and state changes. Security-relevant events are logged and analyzed to detect anomalous patterns, enabling detection of malicious behavior even in dynamically reconfigured systems where communication paths change over time.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The patent applies static analysis and formal verification methods to validate module designs before deployment. Communication protocols and interface definitions are predetermined and validated for security properties, creating a foundation for detecting deviations from expected behavior during runtime even in dynamic configurations.

Inventive Principle:
Principle #10Preliminary action

3Ease of operation

If access control is not strictly enforced, then ease of operation is improved, but object-affected harmful factors increase

Engineering Contradiction:
Improveoperational simplicityVSAvoiddamage risk
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The system introduces an access control intermediary layer that mediates between operational requests and module execution. This intermediary enforces security policies and authorization rules transparently, maintaining ease of operation for legitimate users while preventing harmful actions through automated access control decisions.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent implements security policies and access control rules in advance, before harmful actions can occur. Authorization decisions are predetermined based on module identities, requested operations, and security policies, preventing harmful actions before they can execute rather than relying on post-hoc detection.

Inventive Principle:
Principle #9Preliminary anti-action

Data Source

PatentEP3904982B1Access control within a modular automation system
Publication Date: 2025.08.06 ABB (SCHWEIZ) AG
  • EP3904982B1 patent drawingFigure 1~2
  • EP3904982B1 patent drawingFigure 3
  • EP3904982B1 patent drawingFigure 4

AI summary

The invention relates to a method for managing access control within a modular automation system including at least two automation modules. Each automation module is associated with an operation or a set of operations for carrying out a specific task. The method comprises: receiving a schema of a common process comprising at least the order of processing steps of the modular automation system, wherein each processing step comprises one or more of the specific tasks of the automation modules; generating privilege associations for each processing step with one or more automation modules, based on said schema; and generating an access control policy for the automation modules based on the privilege associations.