Wind Turbine Access Control via Encrypted Checksums
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wind turbine control access systems are unable to function independently of a data connection to an external server, leading to access issues in remote areas or during initial installations, and current security measures are insecure, making unauthorized access possible.
Innovation Solution
A method for access control that involves querying a character string, decrypting it, generating a checksum, and comparing it with predefined selections to extract user rights, allowing secure access without a data connection, and includes features like user ID storage for traceability and one-time password generation for enhanced security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If username and password are stored on the wind turbine control system locally, then access is possible without data connection, but the system becomes unmanageable and insecure
Solution Approach 1:
The access control system is segmented into two parts: a centralized server that manages user credentials and authorization, and a local control system that stores only encrypted access data and checksums. This segmentation allows the control system to function independently while maintaining centralized management through the server.
Solution Approach 2:
An encrypted character string acts as an intermediary between the user and the access control system. The string contains encoded user credentials and authorization data that can be decrypted locally without requiring continuous server connection, while the server remains the ultimate authority for credential management.
2Reliability
If username and password are stored on the wind turbine control system locally, then access is possible without data connection, but security is compromised
Solution Approach 1:
The traditional mechanical password verification system is replaced with an encrypted character string system. The string is decrypted using a predefined procedure, and a checksum is generated from the decrypted data to verify integrity. This substitution maintains security while enabling offline operation.
Solution Approach 2:
The access control parameters are changed from storing plain text credentials to storing encrypted character strings with checksums. The decryption procedure and checksum verification ensure that only authorized users with the correct encrypted string can access the system, maintaining security without requiring continuous server connection.
3Adaptability or versatility
If a data connection to the server is required for access control, then centralized management is maintained, but access is unavailable in remote areas or during initial installation
Solution Approach 1:
The encrypted character string containing user credentials and authorization data is prepared and stored on the control system in advance. This preliminary action enables the system to function independently during initial installation and in remote areas where server connection is unavailable, while still maintaining centralized management capabilities when connection is restored.
4Ease of operation
If simple password verification is used, then ease of operation is improved, but security is compromised allowing unauthorized access
Solution Approach 1:
The simple password verification mechanism is replaced with an encrypted character string system that includes checksum verification. The string is decrypted using a predefined procedure, and a checksum is generated from the decrypted data to verify integrity. This substitution maintains operational simplicity while significantly enhancing security against unauthorized access.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention comprises a method for access control on a wind turbine control system (10), which includes querying (20) a character string (22) with an input device (14) of the wind turbine control system (10), receiving (26) confirmation (25) of an input string (22) from the input device (14), decrypting (34) the input string (22) or a character string (33) derived from the input string (22) using a predefined method, generating (48) a checksum (50) for a predefined first selection (40) of characters from the decrypted character string (36), comparing (52) the generated checksum (50) with a predefined second selection (42) of characters from the decrypted character string (36), and, in the case of a positive comparison, extracting user rights (56) from a predefined third selection (44) of characters from the decrypted character string (36).which is in particular part of the first selection (40), and in particular, when predefined further conditions are met, comprises providing (70) access to the wind turbine control system (10) depending on the user rights (56) and, in the case of a negative comparison (52), preventing (30) access to the wind turbine control system. Furthermore, the invention relates to a computer program product, a wind turbine control system, a wind turbine with a wind turbine control system (10), and a wind farm controller with a wind turbine control system (10).