Portable Updater for Secure Industrial Software Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing software management systems in industrial settings face challenges in updating control software for machine equipment due to security concerns, as field networks are often isolated from the Internet to prevent cyber attacks and data leakage, making direct downloads from cloud servers impossible.
Innovation Solution
A software management system that includes a cloud server for encoding control software with a license key, and a portable updater device that downloads encoded software from the cloud server while connected to the Internet, then decodes and updates control software in connected controllers and sensors via the field network, maintaining physical disconnection from both networks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If field networks are isolated from the Internet to prevent cyber attacks and data leakage, then security is improved, but direct downloads of control software from cloud servers become impossible
Solution Approach 1:
A portable updater device serves as an intermediary between the Internet and the isolated field network. The device downloads control software from a cloud server while connected to the Internet, then physically connects to the field network to transfer and install the software on control devices. This mediator enables software updates without requiring permanent Internet connectivity to the isolated field network, thus maintaining security while enabling update capability.
2Reliability
If control software is downloaded and stored in a portable device for later installation, then network security is maintained, but the update process requires additional steps and time
Solution Approach 1:
The portable updater device performs preliminary actions by downloading and storing control software in its storage unit while connected to the Internet, before physically connecting to the field network for installation. This preliminary download phase allows the actual field network update to proceed quickly without requiring Internet connectivity during the installation process, thus balancing security requirements with efficient update deployment.
3Loss of information
If encoded control software with license keys is transmitted through the portable device, then software confidentiality and authorization are improved, but decoding and verification processes add complexity
Solution Approach 1:
The control software is segmented into encoded portions with embedded license keys. The portable updater device receives the encoded control software, extracts and verifies the license key, and then decodes the software for installation. This segmentation approach maintains software confidentiality during transmission while enabling automated verification and installation processes through the portable device's processing capabilities.
Data Source
AI summary
A software management system includes a control system connected to a first network and including at least one of control circuitry and a sensor, each controllable by updating first control software in the respective at least one of the control circuitry and sensor, a software distribution device including first circuitry that stores second control software and transmits the second software through a second network, and a software update device including second circuitry that, while the software device is connected to the second network, receives the second software from the distribution device and stores the second software, and while the update device is connected to the first network, transmits the second software to the respective at least one of the control circuitry and sensor to cause the respective at least one of the control circuitry and sensor to update the first software using the second software.