Renewable Power Plant Access Control With Permission Sync Feedback

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing access control systems in renewable power plants face issues with permissions not being regularly updated, leading to security risks and inconsistencies between local and off-site central systems, which can be exploited by malicious actors.

Innovation Solution

Implement a role-based access control method where local permissions are periodically checked against a remote dataset and updated to ensure synchronization, using methods such as version data or hash codes to verify and overwrite local datasets.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If permissions are stored locally at computer systems, then access control is faster and more reliable, but the permissions may be corrupted by errors or malicious hacking

Engineering Contradiction:
Improveaccess control reliabilityVSAvoidpermission corruption by errors or hacking
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system implements a feedback mechanism where local permissions datasets are periodically compared with remote master datasets. When differences are detected, the local dataset is automatically updated from the remote source. This continuous feedback loop ensures that local systems maintain accurate, up-to-date permissions while preserving the speed and reliability of local access control operations.

Inventive Principle:
Principle #23Feedback

2Stability of the object's composition

If permissions are stored and updated on an off-site central computer system, then permission consistency across systems is improved, but the permissions may not be updated regularly on local computer systems

Engineering Contradiction:
Improvepermission consistencyVSAvoidpermission update delay
Core Design Contradiction:
Stability of the object's compositionVSLoss of time

Solution Approach 1:

The system performs preliminary actions by proactively comparing local and remote permissions datasets at scheduled intervals or upon detection of changes. This advance checking and updating ensures that permission consistency is maintained without waiting for manual intervention or experiencing delays, as the system continuously synchronizes before inconsistencies can cause issues.

Inventive Principle:
Principle #10Preliminary action

3Adaptability or versatility

If individual user permissions are stored and updated, then access control flexibility is improved, but the system complexity and update maintenance increase

Engineering Contradiction:
Improveaccess control flexibilityVSAvoidpermission system complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The system segments the permission management function by separating user-specific permission data from the central master dataset. Instead of storing complete permission definitions at every local system, only the necessary permission entries for local users are cached. This segmentation reduces data redundancy and system complexity while maintaining the flexibility to handle individual user permissions through role-based access control.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS12574384B2Role-based access control for users in a computer system of a renewable power plant
Publication Date: 2026.03.10 VESTAS WIND SYSTEMS AS
  • US12574384B2 patent drawing
  • US12574384B2 patent drawing
  • US12574384B2 patent drawing

AI summary

The invention relates to a method and a system for role based access control to a computer system of a renewable power plant. The users of the computer system are assigned roles defining permissions for the users accessing the computer system when the user login and the computer system of the renewable power plant is checking whether the local role permissions dataset stored at the computer system is different from a remote role permissions dataset stored on an off-site central computer system. If the local role permission dataset and the remote role permission dataset are different, the computer system of the renewable power plant is pulling the remote role permission dataset from the off-site central computer system and overwriting the local role permission dataset; ensuring that the local role permission dataset is identical to the remote role permission dataset.