Transient Control Applications for Industrial Automation Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Industrial automation systems face security risks due to control applications requiring extensive security authorizations that remain installed and potentially vulnerable, leading to increased security vulnerabilities over time.

Innovation Solution

Implement a method where control applications are provided using sequential control components, isolated in a flow control environment, with defined execution conditions and security policies to terminate their execution when conditions are met, such as maximum duration or other specified criteria.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If control applications requiring extensive security authorizations remain installed on automation devices, then they can be activated when needed, but security vulnerabilities increase over time

Engineering Contradiction:
Improveavailability of control applicationsVSAvoidsecurity vulnerabilities
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent implements dynamic control application execution where applications are loaded into memory and executed temporarily rather than remaining permanently installed. The system dynamically loads control applications from storage into memory, executes them for their specific task, then terminates and removes them from memory, creating a transient presence that reduces security exposure while maintaining functional availability.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent treats control applications as temporary, disposable entities in memory rather than permanent installations. Each application is loaded, executed for its specific purpose, and then discarded from memory. This approach uses the principle of short-living objects where the application exists only for the duration needed to perform its function, after which it is completely removed, eliminating the security risk of long-term installation.

Inventive Principle:
Principle #27Cheap short-living objects (Disposable)

2Object-affected harmful factors

If control applications are executed in a flow control environment, then system security is enhanced, but execution time is limited by defined conditions

Engineering Contradiction:
Improvesecurity riskVSAvoidexecution duration
Core Design Contradiction:
Object-affected harmful factorsVSDuration of action of moving object

Solution Approach 1:

The patent implements preliminary action by defining execution conditions and termination criteria before the control application begins execution. The system pre-configures maximum execution times, resource usage limits, and other constraints that will automatically terminate the application if exceeded. This preliminary setup ensures security without requiring post-execution monitoring or intervention.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent employs feedback mechanisms where the flow control environment continuously monitors execution conditions during application runtime. The system tracks execution duration, resource consumption, and other parameters, providing feedback that triggers automatic termination when predefined thresholds are reached. This closed-loop control ensures applications cannot run indefinitely or exceed safe operational limits.

Inventive Principle:
Principle #23Feedback

Data Source

PatentEP4413429B1Method and system for provision of control applications for an industrial automation system
Publication Date: 2025.08.27 SIEMENS AG
  • EP4413429B1 patent drawingFigure 1
  • EP4413429B1 patent drawingFigure 2

AI summary

The invention relates to a method for providing control applications. Each of the control applications (201-204) is provided by a flow control component (131-133), which can be loaded onto a flow control environment (112) formed by means of a server device (100) and can be executed on same. Control applications (201-203) which require selected security authorizations are assigned a respective label (210) as security-critical control applications. For the control applications (201-203) which are assigned a label (210) as a security-critical application, at least one respective flow condition is ascertained for the selected security authorizations. The flow control environment (112) checks for the occurrence of the respective flow condition while the flow control components (131-133) for the control applications are being executed. The execution of each of the flow control components is terminated when the respective flow condition occurs.