PLC Access Event Sharing for Low-Load Unauthorized Access Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing control systems face increased processing load and reduced availability due to unauthorized access events, which are addressed by comparing specific information for every request, leading to performance degradation.
Innovation Solution
A programmable controller system that shares access information through a distributed ledger among interconnected devices, trains a model to identify exceptional access events, and processes them differently from normal events, improving system availability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If specific information comparison is performed for every access request to prevent unauthorized execution, then security against unauthorized access is improved, but processing load increases and system availability deteriorates
Solution Approach 1:
The system performs preliminary classification of access events into normal and exceptional categories before detailed verification. By pre-identifying exceptional access events using the trained model, the system can apply different processing paths: normal events undergo standard comparison procedures while exceptional events trigger enhanced security checks. This preliminary action prevents unnecessary detailed comparisons for normal events, reducing overall processing load while maintaining security for exceptional cases.
Solution Approach 2:
The system applies different processing qualities to different types of access events. Normal access events receive standard verification processing, while exceptional access events identified by the model trigger more rigorous security checks including detailed specific information comparison. This local differentiation allows the system to concentrate security resources on suspicious events rather than uniformly processing all events, thereby improving system availability while maintaining security.
2Reliability
If specific information comparison is performed for every access request, then unauthorized access detection is improved, but processing time increases
Solution Approach 1:
The trained model performs preliminary identification of exceptional access events before detailed specific information comparison. This preliminary action filters out normal access events that can be processed quickly through standard procedures, reserving time-consuming detailed comparisons only for exceptional events that require thorough security verification. This significantly reduces average processing time while maintaining detection capability for unauthorized access.
Solution Approach 2:
The system applies partial verification (standard comparison) to normal access events and excessive verification (detailed specific information comparison) to exceptional events. This differentiated approach ensures that most normal events are processed efficiently with minimal time loss, while exceptional events receive the necessary thorough verification to detect unauthorized access attempts.
Data Source
AI summary
A programmable logic controller (PLC) is connected to another PLC. The PLC includes a communicator that receives an access event from an external device and performs communication through a network, a storage that stores access information about the access event, a sharer that provides the access information to the other PLC and acquires, from the other PLC, access information about an access event to the other PLC through the network to share the access information with the other PLC in a form of a distributed ledger, and a processor that performs, when the communicator newly receives an exceptional access event occurring less frequently than other access events in the access events indicated by the access information, a process on the exceptional access event. The process is different from a process for the other access events.