Tag-Based Access Control for Automation Configuration Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The configuration of automation apparatuses in large and distributed industrial sites poses challenges due to technical implementation, usability, and data security complexities, necessitating a sophisticated access control solution.

Innovation Solution

An access control apparatus with a user interface, internal and external communication interfaces, and a processor that reads electronic tags for authentication, enabling secure configuration control of automation apparatuses through graphical, textual, and auditory interactions, and communication via various protocols and technologies, allowing local and remote user access with defined access rights.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If access control for automation apparatus configuration is implemented across large and distributed industrial sites, then data security and configuration control are improved, but device complexity and implementation difficulty increase

Engineering Contradiction:
Improvedata securityVSAvoidimplementation complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The access control system is segmented into multiple independent components: electronic tags for user identification, readers for authentication, user interfaces for local interaction, and communication interfaces for network connectivity. This segmentation allows each component to be implemented and managed separately, reducing overall system complexity while maintaining security across distributed sites.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces intermediate components such as the reader device that mediates between the electronic tag and the automation apparatus, and the user interface that mediates between the local user and the system. These intermediaries simplify the interaction model and reduce implementation complexity by providing standardized interfaces.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If multiple communication interfaces and protocols are supported for remote and local access, then usability and accessibility are improved, but device complexity increases

Engineering Contradiction:
Improveuser accessibilityVSAvoidcommunication interface complexity
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The access control apparatus is designed with multi-functional communication capabilities, supporting both local user interface interactions and remote networked service communications through standardized protocols. This universality allows the same device to serve multiple purposes (local configuration and remote management) without requiring separate specialized systems, improving accessibility while managing complexity through protocol standardization.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Reliability

If electronic tag-based authentication is implemented for user access, then access control security is improved, but ease of operation decreases due to additional authentication steps

Engineering Contradiction:
Improveaccess control securityVSAvoiduser interaction simplicity
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent replaces traditional mechanical or manual authentication methods (such as passwords or physical keys) with electronic tag-based authentication using RFID or similar wireless technologies. This substitution maintains security while improving ease of operation, as users can authenticate by simply presenting their electronic tag without manual input, reducing the cognitive and physical effort required.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS11693942B2Access control apparatus and method for controlling configuration of automation apparatus
Publication Date: 2023.07.04 ABB (SCHWEIZ) AG
  • US11693942B2 patent drawing
  • US11693942B2 patent drawing
  • US11693942B2 patent drawing

AI summary

An access control apparatus and method for controlling a configuration of an automation apparatus. The method includes: reading authentication information from an electronic tag; transmitting the authentication information to a networked service; receiving access rights from the networked service; and controlling the configuration of the automation apparatus according to the access rights.