Wireless Industrial Control Interface Security via Authorization

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Industrial control systems face security and identification accuracy issues due to the vulnerability of wireless networking, where a common portable user interface may provide equal access to all functionalities, potentially allowing users to access features for which they lack training or authority, especially as they transition from hardwired connections.

Innovation Solution

A wireless industrial control system incorporating a motor drive with a wireless interface module and a user interface that establishes a secure connection using proprietary protocols like Bluetooth, allowing tailored access through a processing unit and display, with configuration tools to restrict functionality based on user authorization.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a common portable user interface is used to access multiple entities in the industrial control system, then ease of operation is improved, but security and identification accuracy deteriorate

Engineering Contradiction:
Improveease of operationVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent applies local quality by providing different levels of access functionality to different user groups. The system distinguishes between operator-level access (monitoring, basic control) and engineer-level access (configuration, firmware updates). Each user type receives tailored functionality based on their authorization level, ensuring that operators cannot inadvertently access advanced features while maintaining a common portable interface device.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The system dynamically adjusts the functionality available to the user interface based on real-time identification of the connected entity and user authorization level. When a operator connects to a motor drive, the system automatically limits access to operational parameters and basic controls. When an engineer is identified and authorized, additional functionality becomes available. This dynamic adaptation resolves the contradiction by making the interface both universally accessible and security-restricted.

Inventive Principle:
Principle #15Dynamics

2Ease of operation

If wireless networking is used to provide remote access to industrial control entities, then ease of operation is improved, but security and identification accuracy worsen compared to hardwired connections

Engineering Contradiction:
Improveease of operationVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent introduces an intermediary layer between the wireless user interface and the industrial control entities. This intermediary validates the identity of both the user and the target entity before establishing a connection. It verifies that the operator is authorized to access the specific motor drive or controller they are attempting to connect to, preventing unauthorized access while maintaining the convenience of wireless connectivity.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system implements feedback mechanisms that continuously verify the authenticity of wireless connections. Before allowing access, the system receives and validates identification information from both the user interface and the target entity. This feedback loop ensures that only authenticated connections are permitted, addressing security concerns while maintaining wireless ease of operation.

Inventive Principle:
Principle #23Feedback

3Adaptability or versatility

If all users are provided equal access to all functionalities through a common interface, then adaptability is improved, but the risk of misuse increases

Engineering Contradiction:
ImproveadaptabilityVSAvoidrisk of misuse
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent applies local quality by providing different levels of access functionality to different user groups. The system distinguishes between operator-level access (monitoring, basic control) and engineer-level access (configuration, firmware updates). Each user type receives tailored functionality based on their authorization level, ensuring that operators cannot inadvertently access advanced features while maintaining a common portable interface device.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The system segments the functionality of the common portable interface based on user authorization levels. Rather than providing a single unified access mode, the interface is divided into operator functions and engineer functions. This segmentation allows the system to maintain adaptability through a common device while reducing misuse risk by preventing operators from accessing engineer-only features.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS7668605B2Wireless industrial control user interface
Publication Date: 2010.02.23 ROCKWELL AUTOMATION TECH INC
  • US7668605B2 patent drawing
  • US7668605B2 patent drawing
  • US7668605B2 patent drawing

AI summary

An industrial control system includes a motor drive, a wireless interface module, and a wireless user interface. The motor drive has at least a first port. The wireless interface module is coupled to the first port of the motor drive. The wireless user interface is operable to connect to the wireless interface module and establish a first connection through the wireless interface module to access the motor drive. A user interface operable to connect to a device within an industrial control system includes a display and a processing unit operable to establish a connection with the device and display an image representative of the device on the display responsive to establishing the connection.