Safety-Critical Automation Parameterization via Intermediary Server

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current automation systems for controlling safety-critical processes face challenges in simple and reliable parameterization, especially when using non-safe control systems and networks, where secure network participants may lose their parameterization upon replacement, requiring secure reconfiguration without secure communication masters.

Innovation Solution

A control device with a communication network that includes a non-safe communication master and secure network participants, where the logic module initiates parameterization by sending read requests to the communication master, which then transmits parameterization data to secure network participants, establishing secure point-to-point connections for parameterization, even in non-secure networks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If a non-safe communication master is used to control data flow in the network, then the system can use common hardware and software for communication and configuration, but the parameterization of safe network participants becomes unreliable when participants are replaced

Engineering Contradiction:
Improveintegration with non-secure controllersVSAvoidparameterization retention
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent introduces a parameterization server as an intermediary component that mediates between the non-safe communication master and safe network participants. This server stores parameterization data securely and provides it to safe participants upon request, ensuring that parameterization is maintained reliably even when participants are replaced, while still allowing integration with non-secure controllers through the communication master.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of repair

If secure network participants are replaced, then defective participants can be renewed, but the new participants lack the necessary parameterization

Engineering Contradiction:
Improveparticipant replacementVSAvoidparameterization data
Core Design Contradiction:
Ease of repairVSLoss of information

Solution Approach 1:

The patent implements preliminary action by having the parameterization server pre-store all necessary parameterization data before participants are replaced. When a new safe network participant joins or is replaced, it automatically requests and receives the required parameterization data from the server, ensuring that parameterization is restored without manual reconfiguration.

Inventive Principle:
Principle #10Preliminary action

3Ease of operation

If parameterization data are transmitted via a non-secure network, then communication is possible with non-secure controllers, but the data transmission may not be secure

Engineering Contradiction:
Improveparameterization transmissionVSAvoiddata falsification
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent employs feedback mechanisms where the parameterization server authenticates requests from safe network participants and verifies the integrity of transmitted parameterization data. The server provides confirmation that data has been successfully received and correctly parameterized, creating a closed-loop system that detects and prevents data falsification even over non-secure networks.

Inventive Principle:
Principle #23Feedback

Data Source

PatentEP2825921B1Control device for controlling safety-critical processes in an automated plant and method for parameterizing the control device
Publication Date: 2020.03.04 PHOENIX CONTACT GMBH & CO KG
  • EP2825921B1 patent drawingFigure 1~4
  • EP2825921B1 patent drawingFigure 2
  • EP2825921B1 patent drawingFigure 3

AI summary

The invention relates to safety-related functions in automation systems for controlling industrial production processes. The aim of the invention is to provide a simple and safe parameterization of the safety-related apparatuses of such an automation plant. After a start signal sent by the communication master is received, all further activities for parameterization are controlled by a logic module.