Remote Equipment Support Access With Automated Approval Gateways

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Manufacturing facilities face security risks when allowing remote collaboration with equipment suppliers due to the need for electronic access, which can compromise sensitive information, and existing security measures are complex and manual, differing by collaboration type.

Innovation Solution

A method is implemented where requests for electronic access by equipment suppliers are routed to predefined approvers, and upon approval, a secure connection is automatically created and terminated using a gateway and permission engine, ensuring controlled access through a virtual private network for remote support activities.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual security controls are implemented for different types of collaboration, then security is maintained, but device complexity and ease of operation deteriorate

Engineering Contradiction:
Improvecomputer securityVSAvoidsecurity control complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges multiple types of collaboration security controls (audioconferencing, videoconferencing, data transfer for troubleshooting, data transfer for optimization) into a single unified automated approval system. The gateway consolidates these different collaboration types under one security framework, eliminating the need for separate manual controls for each type while maintaining comprehensive security coverage.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The gateway is designed as a universal security system that handles multiple collaboration functions through a single automated approval mechanism. It can process requests for various types of equipment access, data transfers, and communication sessions using the same security protocols and approval workflow, making the security system adaptable to diverse collaboration needs without increasing complexity.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Productivity

If automated connection creation is implemented, then productivity and ease of operation improve, but security risks may worsen

Engineering Contradiction:
Improveremote collaboration efficiencyVSAvoidcomputer security
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The system performs preliminary security validation by routing connection requests to predefined approvers before automatically creating connections. The approval process occurs in advance, establishing security clearance before the automated connection is established. This ensures that automation does not bypass security checks but rather executes pre-approved security decisions.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The gateway acts as an intermediary between the manufacturing facility's network and external equipment supplier systems. It mediates all connection requests by routing them through a standardized approval process and creating controlled connections only after validation. This intermediary role allows automation while maintaining security oversight, as the gateway controls and monitors all connections rather than allowing direct unmediated access.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS11662716B2Secure remote collaboration for equipment in a manufacturing facility
Publication Date: 2023.05.30 KLA CORP
  • US11662716B2 patent drawing
  • US11662716B2 patent drawing
  • US11662716B2 patent drawing

AI summary

In some embodiments, a method is performed at a computer system of a manufacturer. The manufacturer operates a manufacturing facility that includes equipment from an equipment supplier. In the method, a request is received for electronic access by the equipment supplier to the manufacturing facility to perform a remote support activity for the equipment. The request is routed to predefined approvers. Approval of the request is received from the predefined approvers. In response to receiving approval of the request from the predefined approvers, a connection is automatically created between an electronic device in the manufacturing facility and a computer system for the equipment supplier. The connection is used for the remote support activity. Upon completion of the remote support activity, the connection is automatically terminated.