Graph-Based Industrial Plant Data Access Control by Scope and Role

The patent segments the industrial plant data model into a graph structure where data elements (sensors, processing elements, controllers) are represented as nodes and their relationships as edges. This segmentation allows complex data relationships to be systematically organized and accessed through defined scopes and paths, resolving the contradiction by making the complex system manageable through structured division.

The patent introduces a hierarchical scope dimension to the traditional flat access control model. By defining multiple scopes (plant scope, area scope, device scope) and allowing navigation through these dimensional layers, the system can handle complex data relationships without proportionally increasing structural complexity. This dimensional approach enables versatile data access control while maintaining system organization.

The patent implements preliminary action by pre-defining scopes and access permissions in the graph database structure before data access operations. Roles and their associated permissions are established in advance, allowing the system to efficiently grant or deny access based on pre-configured rules rather than making security decisions in real-time, thus maintaining both security and efficiency.

The patent introduces scopes as intermediary layers between the data storage structure and the access control mechanism. These scopes act as mediators that organize data elements and define access boundaries, allowing the system to provide comprehensive data access where needed while maintaining security through structured permission management at each scope level.

The patent applies universality by designing a graph database plant model that serves multiple functions simultaneously: it represents the physical plant structure, organizes data elements, defines access scopes, and enables query operations. This multi-functional approach allows detailed data organization without proportionally increasing implementation difficulty, as the same structure supports multiple operational requirements.

The patent utilizes parameter changes by allowing the graph database model to be configured with different levels of detail based on specific plant requirements. The scope hierarchy and node properties can be adjusted to match the complexity of the actual plant, enabling detailed precision where needed while simplifying the model where appropriate, thus balancing precision with implementation ease.