Workstation Authentication via Auditor Verification for Remote Equipment

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

There is a need for a secure and centralized method to monitor and verify the configuration and operational status of technical equipment and software within a network or system, especially for remote devices, to prevent damage from malware and ensure authenticity without requiring on-site technical expertise.

Innovation Solution

A system comprising a work station, an acquisition device, a control device, and an auditor device, where the auditor device, potentially a Hardware Security Module (HSM), verifies configuration information before starting a work process, ensuring only authorized and operational components are used, and securely transmits data using FIPS 140-2 certification.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If centralized monitoring is implemented for remote devices, then system security and authentication are improved, but device complexity and implementation difficulty increase

Engineering Contradiction:
Improvesystem securityVSAvoidimplementation difficulty
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces an auditor device as an intermediary component that centralizes authentication and monitoring functions. This auditor device receives configuration information from work stations, verifies authenticity using cryptographic methods (FIPS 140-2 certification), and provides centralized security without requiring complex local authentication systems at each remote device. The intermediary handles the complexity of security verification centrally while keeping individual work station implementations relatively simple.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If configuration verification is performed before work process, then system reliability and prevention of erroneous operations are improved, but processing time and operational delays increase

Engineering Contradiction:
Improveprevention of erroneous operationsVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent implements preliminary verification of configuration information before the work process begins. The auditor device verifies authentication data, checks system configuration, and validates cryptographic certificates in advance. This preliminary action ensures that only authenticated and properly configured work stations can execute processes, preventing erroneous operations while establishing security credentials beforehand to minimize delays during actual work execution.

Inventive Principle:
Principle #10Preliminary action

3Measurement precision

If on-site technical expertise is required for device examination, then authentication accuracy is improved, but operational efficiency and remote monitoring capability deteriorate

Engineering Contradiction:
Improveauthentication accuracyVSAvoidremote monitoring capability
Core Design Contradiction:
Measurement precisionVSProductivity

Solution Approach 1:

The patent replaces the mechanical approach of requiring physical on-site examination by trained technicians with an automated electronic authentication system. The auditor device uses cryptographic verification methods (FIPS 140-2 certified algorithms) to automatically verify device authenticity, configuration correctness, and component legitimacy. This substitution maintains high authentication accuracy through sophisticated cryptographic validation while enabling remote monitoring and eliminating the need for physical presence of technical experts.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

4Reliability

If cryptographic verification methods are used for data transmission, then data security and protection from manipulation are improved, but computational overhead and processing requirements increase

Engineering Contradiction:
Improvedata securityVSAvoidcomputational overhead
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent applies cryptographic verification selectively to critical authentication and configuration verification processes rather than all data transmissions. The FIPS 140-2 certified cryptographic methods are used specifically for verifying work station identity, validating system configuration, and protecting sensitive authentication data. This partial application of cryptographic methods provides strong security where most needed while minimizing computational overhead for routine operational data exchanges.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS11334050B2Authentication system and authentication method for executing a work process on an object
Publication Date: 2022.05.17 FRANCOTYP POSTALIA AG & CO KG
  • US11334050B2 patent drawing
  • US11334050B2 patent drawing

AI summary

A system and a method for executing a work process on an object. The system includes at least one work station, an acquisition device, a control device and an auditor device.