[go: up one dir, main page]

EP3983854A1 - Procédé d'activation ou de désactivation d'au moins une fonctionnalité matérielle et/ou logicielle d'un composant d'automatisation - Google Patents

Procédé d'activation ou de désactivation d'au moins une fonctionnalité matérielle et/ou logicielle d'un composant d'automatisation

Info

Publication number
EP3983854A1
EP3983854A1 EP20723861.9A EP20723861A EP3983854A1 EP 3983854 A1 EP3983854 A1 EP 3983854A1 EP 20723861 A EP20723861 A EP 20723861A EP 3983854 A1 EP3983854 A1 EP 3983854A1
Authority
EP
European Patent Office
Prior art keywords
automation component
code
field device
hardware
server
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
EP20723861.9A
Other languages
German (de)
English (en)
Inventor
Michael Mayer
Wolfgang Höferlin
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Endress and Hauser Process Solutions AG
Original Assignee
Endress and Hauser Process Solutions AG
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Endress and Hauser Process Solutions AG filed Critical Endress and Hauser Process Solutions AG
Publication of EP3983854A1 publication Critical patent/EP3983854A1/fr
Withdrawn legal-status Critical Current

Links

Classifications

    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B19/00Programme-control systems
    • G05B19/02Programme-control systems electric
    • G05B19/04Programme control other than numerical control, i.e. in sequence controllers or logic controllers
    • G05B19/042Programme control other than numerical control, i.e. in sequence controllers or logic controllers using digital processors
    • G05B19/0426Programming the control sequence
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/10Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B2219/00Program-control systems
    • G05B2219/20Pc systems
    • G05B2219/23Pc programming
    • G05B2219/23363Barcode
    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B2219/00Program-control systems
    • G05B2219/20Pc systems
    • G05B2219/24Pc safety
    • G05B2219/24165Use codes to activate features of controller
    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B2219/00Program-control systems
    • G05B2219/20Pc systems
    • G05B2219/25Pc structure of the system
    • G05B2219/25428Field device

Definitions

  • the invention relates to a method for activating or deactivating at least one hardware and / or software functionality of an automation component, the
  • Automation component contains an input unit and an output unit.
  • Field devices are used to record and / or influence process variables. Measuring devices or
  • Conductivity measurement, flow measurement, pH measurement, level measurement, etc. use and record the corresponding process variables pressure, temperature, conductivity, pH value, level, flow rate, etc.
  • Actuators are used to influence process variables. These are, for example, pumps or valves that can influence the flow of a liquid in a pipe or the level in a container.
  • field devices also include remote I / Os, radio adapters or, in general, devices that are arranged on the field level.
  • Control systems or control units such as a PLC (programmable logic circuit
  • the higher-level units are used, among other things, for process control, process visualization, process monitoring and for commissioning the field devices.
  • the measured values recorded by the field devices, in particular by sensors, are transmitted to one (or possibly several) higher-level unit (s) via the respective bus system.
  • data transmission from the higher-level unit via the bus system to the field devices is necessary, in particular for configuring and parameterizing field devices and for controlling actuators.
  • a method is used nowadays which is based on the fact that data must be exchanged between the device and between a license server.
  • a USB stick is connected to an interface of the corresponding device, with data being copied from the device to the USB stick.
  • the USB stick is then connected to an internet-enabled computer.
  • the data loaded from the USB stick are then transferred to the license server, which generates a license and sends back activation data. These then have to be uploaded to the corresponding device using a USB stick.
  • the activation or licensing process behaves in a similar way for field devices which, in addition to the basic functionalities (acquisition of process variables, setting a manipulated variable, etc.) offer additional functionalities, for example, have extended functionalities that can be activated by the customer. This also applies to additional hardware that is built into a field device, for example additional sensor units.
  • the activation component is often located in a critical infrastructure of the plant.
  • Critical means that a failure or manipulation of the activation component can result in costly and time-consuming system failures.
  • the USB stick could contain malware such as viruses or Trojans and thus the critical infrastructure could be attacked, even though it may be offline.
  • a license file could be printed out in binary form and typed in manually - but this is a user-unfriendly and error-prone method.
  • the file to be entered could also be manipulated so that, for example, components of malware are embedded.
  • the invention is based on the object of presenting a method which is safe and User-friendly alternative to the described deactivation / activation or
  • the object is achieved by a method for activating or deactivating at least one hardware and / or software functionality of an automation component, the
  • Automation component contains an input unit and an output unit, comprising: i. Generating identification information of the automation component;
  • predetermined character length from the server to the operating device
  • the method according to the invention enables secure activation or licensing of hardware and / or software functionality of an automation component. It is no longer necessary to use media that can be manipulated, or in the sense of a USB memory stick, via which the automation component could be manipulated or malware could be installed.
  • To transmit the information that the server needs in order to be able to create the license information for example the type of hardware and / or software functionality, or identification information such as the type of
  • Automation component the serial number of the automation component
  • a unidirectional data channel is established, via which this information is made available as a machine-detectable code.
  • This information is made available as a machine-detectable code.
  • the server then creates the license information, which is output to the operator in the form of an alphanumeric data sequence, for example visually via a display unit of the Control device or acoustically as an audio signal by means of the control device.
  • the length of the character string is chosen so that it can still be entered comfortably by the operator, but so long that the license information cannot be entered validly by guessing. Provision can be made to provide the operator with the expected format or the structural structure of the
  • Character string (e.g. the length of the character string; sections in which only numbers are provided; sections in which only letters are provided; etc.) in advance, e.g. by making a corresponding entry in the operating instructions so that the operator can quickly establish an initial plausibility the license information issued to him.
  • deactivation using the method according to the invention is also possible.
  • a hardware and / or software functionality can be run in a restricted mode.
  • the hardware and / or software functionality is only activated temporarily for a predetermined period of time. After the time has elapsed, the hardware and / or software functionality is deactivated and must be activated again using the method described in claim 1. It can be provided that the duration is already specified in the software or in the hardware. Alternatively, the duration is encoded in the alphanumeric data sequence of the first license information item.
  • predetermined character length from the server to the operating device
  • Automation component and xviii.
  • a confirmation request is sent to the server in the manner described above.
  • an optical code in particular a QR code, a flicker code, or a barcode
  • a display unit in particular a display
  • any other type of optical code can of course be used.
  • the operating device has a camera and that the reaction-free unidirectional data channel is formed in that the camera detects the first optical code or the second optical code. In this way, it is not possible for the operator to access the automation component from the operator panel via the data channel.
  • an acoustic reproduction means is used as the output unit and that an acoustic frequency-modulated and / or amplitude-modulated audio signal is used as the first code and / or as the second code.
  • Frequency shift keying modulation, multi-frequency coding or pulse code modulation can also be used.
  • the operating device has an acoustic recording means, in particular a microphone, and that the reaction-free unidirectional data channel is formed by the acoustic recording means receiving the first acoustic code or the second acoustic code , listen in.
  • the first or second code can also be transmitted via electromagnetic transmission. It must be ensured here that the transmission channel is designed exclusively unidirectional.
  • the activation or deactivation of the hardware and / or software functionality also only takes place in the event that the input of the first license information issued is within a predetermined time interval after the identification information has been generated
  • Automation component takes place. If the first license information is only entered after the specified time interval, the procedure must be repeated.
  • Software functionality also only takes place in the event that the second license information item issued is entered within a predetermined time interval after the generation of the
  • the possibility of manipulating the method is further reduced. Since the license information to be entered is an alphanumeric data sequence with a short length (for example between 6 and 8 characters), an operator could enter the license information validly by guessing. Setting a time limit reduces the chance of successful guessing.
  • a laptop or a mobile terminal device is used as the operating device.
  • mobile phone any mobile device.
  • End devices are, for example, smartphones or tablet PCs.
  • the operating device is in communication with the server via the Internet.
  • a field device is used as the automation component for detecting or setting a variable of a procedural process by means of a basic functionality, the hardware and / or software functionality being one of the following: Specific measurement functionality;
  • input units are used for keys on the field device housing.
  • the automation component used is an operating unit on which an operating application for a field device is implemented, the hardware and / or
  • the operating unit is, for example, a higher-level unit in the sense of a control system PC or a control unit, or else a PC or laptop or a mobile one Control device in the sense of the "Field Xperts" produced and sold by the applicant, or a mobile device, for example in the sense of the "SMT70" tablet marketed by the applicant.
  • the operating application is, for example, a frame application
  • Fig. 1 an embodiment of the method according to the invention.
  • a first-time use of an automation component AK is described by the customer.
  • the automation component AK is an SMT70 tablet which is used to operate a field device.
  • operating means reading or writing parameter values of the field device, reading out by the
  • Identification data of the field device reading out diagnostic data of the field device, etc.
  • an operating program is implemented on the automation component AK, for example an FDT frame application on which a device driver (DTM, “Device Type Manager”) of the field device is loaded.
  • DTM device driver
  • Control unit BG here in the form of a smartphone, which itself has access to the Internet and which receives the data required for checking the license from the
  • Automation component AK can procure without being able to access them themselves.
  • the automation component is generated
  • Identification information of the operating software and the automation component can be acquired as required.
  • the automation component AK provides the identification information via an output unit AE as a machine-interpretable code CD for retrieval.
  • the machine-interpretable code CD in this example is a QR code.
  • the output unit AE is a touchscreen, which can also serve as an input unit EE, which displays the QR code.
  • Automation component a countdown, within which the input of first license information is expected in the input unit EE.
  • the operating device BG reads in the code CD using a camera and interprets it, i.e. that the control unit contains the CD contained in the code
  • the operating device BG then transmits in method step iv) the
  • the license information is then transmitted to the operating device BG in a method step vi).
  • an eight-digit string (“x24a std6") is shown on the display of the operator panel BG.
  • step vii) the operator enters this character string on the input unit EE, that is to say the touchscreen, the automation component.
  • the automation component carries out a plausibility test if the character string was entered within the countdown.
  • the plausibility check includes, for example, checking a checksum contained in the character string.
  • the operating software is activated temporarily in a method step ix), for example for a period of two weeks.
  • the operator can now operate the field device using the automation component.
  • the method according to the invention must be repeated within a period of two weeks:
  • the automation component In method step x), the automation component generates a confirmation request or request for the license server that the operating program has been temporarily activated.
  • the automation component AK makes the confirmation request via an output unit AE as a machine-interpretable code CD on the output unit AE ready for retrieval.
  • the machine-interpretable code CD is again a QR code.
  • the operating device BG reads the code CD by means of the camera and interprets it, i.e. that the control unit contains the CD contained in the code
  • the operating device BG then transmits in method step xiii) the
  • the confirmation information is then transmitted to the operating device BG in a method step xv). This in turn outputs the confirmation information in the form of an alphanumeric character string using the display.
  • step xvi) the operator enters this character string on the input unit EE, that is to say on the touchscreen, the automation component AK.
  • method step xvii the automation component carries out a plausibility test if the character string was entered within the countdown. If the plausibility check is successful, the operating software is activated permanently in a method step xviii). It is then no longer necessary to send information to the server SE.

Landscapes

  • Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • Technology Law (AREA)
  • Multimedia (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • General Engineering & Computer Science (AREA)
  • Automation & Control Theory (AREA)
  • Stored Programmes (AREA)
  • Debugging And Monitoring (AREA)

Abstract

La présente invention concerne un procédé d'activation ou de désactivation d'au moins une fonctionnalité matérielle et/ou logicielle d'un composant d'automatisation (AK), le composant d'automatisation (AK) contenant une unité d'entrée (EE) et une unité de sortie (AE). Ledit procédé comprend : i) la génération d'une information d'identification du composant d'automatisation (AK) ; ii) la fourniture de l'information d'identification, en tant que premier code interprétable par machine (CD), à l'unité de sortie (AE) du composant d'automatisation (AK) ; iii) la détection du premier code fourni au moyen d'un appareil de commande (BE) par le biais d'un canal de données unidirectionnel sans rétroaction ; iv) le transfert de l'information d'identification de l'appareil de commande (BE) à un serveur (SE) ; v) la génération d'une première information de licence au moyen du serveur (SE) ; vi) le transfert de la première information de licence, en tant que série de données alphanumérique ayant une longueur de caractères prédéfinie, du serveur (SE) à l'appareil de commande (BE) ; vii) l'entrée de la première information de licence fournie dans le composant d'automatisation (AK) au moyen de l'unité d'entrée (EE) ; viii) la vérification de la plausibilité de la première information de licence au moyen du composant d'automatisation (AK) ; et ix) l'activation ou la désactivation de la fonctionnalité matérielle et/ou logicielle en cas de vérification réussie de la plausibilité de la première information de licence.
EP20723861.9A 2019-06-14 2020-05-06 Procédé d'activation ou de désactivation d'au moins une fonctionnalité matérielle et/ou logicielle d'un composant d'automatisation Withdrawn EP3983854A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE102019116209.2A DE102019116209A1 (de) 2019-06-14 2019-06-14 Verfahren zum Aktivieren oder Deaktivieren zumindest einer Hardware- und/oder Softwarefunktionalität einer Automatisierungskomponente
PCT/EP2020/062534 WO2020249323A1 (fr) 2019-06-14 2020-05-06 Procédé d'activation ou de désactivation d'au moins une fonctionnalité matérielle et/ou logicielle d'un composant d'automatisation

Publications (1)

Publication Number Publication Date
EP3983854A1 true EP3983854A1 (fr) 2022-04-20

Family

ID=70483147

Family Applications (1)

Application Number Title Priority Date Filing Date
EP20723861.9A Withdrawn EP3983854A1 (fr) 2019-06-14 2020-05-06 Procédé d'activation ou de désactivation d'au moins une fonctionnalité matérielle et/ou logicielle d'un composant d'automatisation

Country Status (5)

Country Link
US (1) US20220365506A1 (fr)
EP (1) EP3983854A1 (fr)
CN (1) CN113950646A (fr)
DE (1) DE102019116209A1 (fr)
WO (1) WO2020249323A1 (fr)

Families Citing this family (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
LU102418B1 (de) * 2021-01-12 2022-07-12 Phoenix Contact Gmbh & Co Technik zur Validierung einer Sicherheitsfunktion einer Steuerung
DE102022100708A1 (de) 2022-01-13 2023-07-13 Turck Holding Gmbh Verfahren zur Änderung von Softwaredaten eines Feldgerätes und eine ein solches Feldgerät umfassende Anlage
DE102022102662A1 (de) 2022-02-04 2023-08-10 Krohne Messtechnik Gmbh Verfahren zur sicheren Freigabe einer Kommunikationsverbindung zwischen einem Feldgerät und einem Bediengerät und ein entsprechendes Feldgerät
DE112022005189B4 (de) * 2022-02-10 2025-07-17 Mitsubishi Electric Corporation Kommunikationssystem, Lizenzmanagementsystem, mobiles Endgerät, Kommunikationsverfahren, Kommunikationsprogramm für ein mobiles Endgerät und Steuervorrichtung
US12081565B2 (en) 2022-11-14 2024-09-03 Rockwell Automation Technologies, Inc. Facilitating direct device-to-cloud communications within a secure deployment management system
US12085921B2 (en) * 2022-11-14 2024-09-10 Rockwell Automation Technologies, Inc. Managing firmware and software updates within a secure deployment system
DE102023122743A1 (de) * 2023-08-24 2025-02-27 Endress + Hauser Process Solutions Ag Aktivierungsverwaltung für das Steuerungsprogramm in Steuerelementen
DE102023123828A1 (de) 2023-09-05 2025-03-06 Vega Grieshaber Kg Messgerät und Verfahren zum Messen eines Füllstands, eines Grenzstands und/oder eines Drucks mit Betriebsberechtigungskontrolle
DE102023136446A1 (de) * 2023-12-22 2025-06-26 Endress+Hauser Process Solutions Ag Verfahren zum Erstellen eines Geräteberichts eines Feldgeräts sowie System zum Erstellen eines Geräteberichts eines Feldgeräts

Family Cites Families (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8271336B2 (en) * 1999-11-22 2012-09-18 Accenture Global Services Gmbh Increased visibility during order management in a network-based supply chain environment
US8620818B2 (en) * 2007-06-25 2013-12-31 Microsoft Corporation Activation system architecture
US20110098030A1 (en) * 2009-10-27 2011-04-28 Nokia Corporation Method and apparatus for activating services
US8990142B2 (en) * 2009-10-30 2015-03-24 The Nielsen Company (Us), Llc Distributed audience measurement systems and methods
DE102009055093A1 (de) * 2009-12-21 2011-06-22 Endress + Hauser Conducta Gesellschaft für Mess- und Regeltechnik mbH + Co. KG, 70839 Feldgerät
DE102011079890A1 (de) * 2011-07-27 2013-01-31 Codewrights Gmbh System und Verfahren zur Bedienung von Feldgeräten in einer Automatisierungsanlage
ES2461626T3 (es) * 2011-09-20 2014-05-20 Miele & Cie. Kg Procedimiento para operar un aparato doméstico y sistema con un tal aparato doméstico
DE102012214018B3 (de) * 2012-08-07 2014-02-13 Siemens Aktiengesellschaft Autorisierung eines Nutzers durch ein tragbares Kommunikationsgerät
DE102013013299A1 (de) * 2013-08-12 2015-02-12 Endress + Hauser Conducta Gesellschaft für Mess- und Regeltechnik mbH + Co. KG Verfahren zum Bedienen eines Feldgeräts
US9892355B2 (en) * 2015-05-20 2018-02-13 The Code Corporation Barcode-reading system

Also Published As

Publication number Publication date
WO2020249323A1 (fr) 2020-12-17
DE102019116209A1 (de) 2020-12-17
US20220365506A1 (en) 2022-11-17
CN113950646A (zh) 2022-01-18

Similar Documents

Publication Publication Date Title
EP3983854A1 (fr) Procédé d'activation ou de désactivation d'au moins une fonctionnalité matérielle et/ou logicielle d'un composant d'automatisation
DE102004011162A1 (de) Verknüpfungsautomatik von Prozess-Ereignisdaten zu einem Datenarchivsystem
DE102008027935A1 (de) Vorrichtung zur Integration von Geräteobjekten in eine übergeordnete Steuereinheit
EP1658538B1 (fr) Procede pour generer des modules logiciels pour des appareils de terrain de la technique d'automatisation de processus
EP3607405B1 (fr) Procédé de paramétrage d'un appareil de terrain et appareil de terrain paramétrable
WO2008012164A1 (fr) Procédé pour déconnecter des fonctionnalités particulières dans des appareils de terrain en technique d'automatisation
WO2009074544A1 (fr) Procédé pour faire fonctionner un système présentant un appareil de terrain et un système de commande
EP1108984A1 (fr) Appareil mobile programmable
WO2016026622A1 (fr) Procédé de paramétrage d'un appareil de terrain
EP2701019B1 (fr) Procédé de paramétrage d'un appareil de terrain, appareil de terrain correspondant et système de paramétrage
DE102015114442A1 (de) Verfahren zur Aktivierung einer inaktiven Schnittstelle an einem Feldgerät der Prozessautomatisierung
WO2012136457A1 (fr) Dispositif et système pour la détermination, l'optimisation ou la surveillance d'au moins une grandeur de processus
WO2023041400A1 (fr) Procédé de capture de résultats d'une évaluation, d'un diagnostic et/ou d'un contrôle d'au moins une fonctionnalité de dispositif d'un dispositif de terrain
DE102019134895A1 (de) Verfahren zum rückführungsfreien Übertragen feldgerätebezogener Daten
EP3555717B1 (fr) Unité d'exploitation pour appareil de terrain de la technologie d'automatisation
DE102016107045B4 (de) Verfahren und System zum sicheren Konfigurieren eines Feldgeräts der Prozessautomatisierung
EP2876514A1 (fr) Contrôle du fonctionnement d'appareils techniques d'un système d'automatisation de processus industriel par un test de boucle
EP4432034B1 (fr) Procédé et système de détection d'une configuration d'un contrôleur de sécurité modulaire
EP1363175A1 (fr) Système d'automatisation ou appareil de diagnostic pour un ou plusieurs composants d'une installation et méthode d'opération d'un tel système
WO2016087149A1 (fr) Procédé d'écrasement d'une mémoire non volatile d'un appareil de terrain
WO2012028366A1 (fr) Procédé garantissant le mode de fonctionnement correct d'une installation d'automatisation
EP4078916B1 (fr) Transfert de configuration de sécurité d'un premier à un deuxième appareil de terrain
DE102016110723A1 (de) Verfahren zum Verhindern eines unerlaubten Zugriffs auf Softwareanwendungen in Feldgeräten
WO2023156142A1 (fr) Procédé de vérification de l'authenticité d'un micrologiciel d'un appareil de terrain en technique d'automatisation
WO2023186666A1 (fr) Procédé pour effectuer des vérifications de sécurité sur un contrôleur de sécurité modulaire

Legal Events

Date Code Title Description
STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: UNKNOWN

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE INTERNATIONAL PUBLICATION HAS BEEN MADE

PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: REQUEST FOR EXAMINATION WAS MADE

17P Request for examination filed

Effective date: 20211124

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

DAV Request for validation of the european patent (deleted)
DAX Request for extension of the european patent (deleted)
STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: EXAMINATION IS IN PROGRESS

17Q First examination report despatched

Effective date: 20221223

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN

18D Application deemed to be withdrawn

Effective date: 20230503