EP3983854A1 - Procédé d'activation ou de désactivation d'au moins une fonctionnalité matérielle et/ou logicielle d'un composant d'automatisation - Google Patents
Procédé d'activation ou de désactivation d'au moins une fonctionnalité matérielle et/ou logicielle d'un composant d'automatisationInfo
- Publication number
- EP3983854A1 EP3983854A1 EP20723861.9A EP20723861A EP3983854A1 EP 3983854 A1 EP3983854 A1 EP 3983854A1 EP 20723861 A EP20723861 A EP 20723861A EP 3983854 A1 EP3983854 A1 EP 3983854A1
- Authority
- EP
- European Patent Office
- Prior art keywords
- automation component
- code
- field device
- hardware
- server
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Withdrawn
Links
Classifications
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B19/00—Programme-control systems
- G05B19/02—Programme-control systems electric
- G05B19/04—Programme control other than numerical control, i.e. in sequence controllers or logic controllers
- G05B19/042—Programme control other than numerical control, i.e. in sequence controllers or logic controllers using digital processors
- G05B19/0426—Programming the control sequence
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B2219/00—Program-control systems
- G05B2219/20—Pc systems
- G05B2219/23—Pc programming
- G05B2219/23363—Barcode
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B2219/00—Program-control systems
- G05B2219/20—Pc systems
- G05B2219/24—Pc safety
- G05B2219/24165—Use codes to activate features of controller
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B2219/00—Program-control systems
- G05B2219/20—Pc systems
- G05B2219/25—Pc structure of the system
- G05B2219/25428—Field device
Definitions
- the invention relates to a method for activating or deactivating at least one hardware and / or software functionality of an automation component, the
- Automation component contains an input unit and an output unit.
- Field devices are used to record and / or influence process variables. Measuring devices or
- Conductivity measurement, flow measurement, pH measurement, level measurement, etc. use and record the corresponding process variables pressure, temperature, conductivity, pH value, level, flow rate, etc.
- Actuators are used to influence process variables. These are, for example, pumps or valves that can influence the flow of a liquid in a pipe or the level in a container.
- field devices also include remote I / Os, radio adapters or, in general, devices that are arranged on the field level.
- Control systems or control units such as a PLC (programmable logic circuit
- the higher-level units are used, among other things, for process control, process visualization, process monitoring and for commissioning the field devices.
- the measured values recorded by the field devices, in particular by sensors, are transmitted to one (or possibly several) higher-level unit (s) via the respective bus system.
- data transmission from the higher-level unit via the bus system to the field devices is necessary, in particular for configuring and parameterizing field devices and for controlling actuators.
- a method is used nowadays which is based on the fact that data must be exchanged between the device and between a license server.
- a USB stick is connected to an interface of the corresponding device, with data being copied from the device to the USB stick.
- the USB stick is then connected to an internet-enabled computer.
- the data loaded from the USB stick are then transferred to the license server, which generates a license and sends back activation data. These then have to be uploaded to the corresponding device using a USB stick.
- the activation or licensing process behaves in a similar way for field devices which, in addition to the basic functionalities (acquisition of process variables, setting a manipulated variable, etc.) offer additional functionalities, for example, have extended functionalities that can be activated by the customer. This also applies to additional hardware that is built into a field device, for example additional sensor units.
- the activation component is often located in a critical infrastructure of the plant.
- Critical means that a failure or manipulation of the activation component can result in costly and time-consuming system failures.
- the USB stick could contain malware such as viruses or Trojans and thus the critical infrastructure could be attacked, even though it may be offline.
- a license file could be printed out in binary form and typed in manually - but this is a user-unfriendly and error-prone method.
- the file to be entered could also be manipulated so that, for example, components of malware are embedded.
- the invention is based on the object of presenting a method which is safe and User-friendly alternative to the described deactivation / activation or
- the object is achieved by a method for activating or deactivating at least one hardware and / or software functionality of an automation component, the
- Automation component contains an input unit and an output unit, comprising: i. Generating identification information of the automation component;
- predetermined character length from the server to the operating device
- the method according to the invention enables secure activation or licensing of hardware and / or software functionality of an automation component. It is no longer necessary to use media that can be manipulated, or in the sense of a USB memory stick, via which the automation component could be manipulated or malware could be installed.
- To transmit the information that the server needs in order to be able to create the license information for example the type of hardware and / or software functionality, or identification information such as the type of
- Automation component the serial number of the automation component
- a unidirectional data channel is established, via which this information is made available as a machine-detectable code.
- This information is made available as a machine-detectable code.
- the server then creates the license information, which is output to the operator in the form of an alphanumeric data sequence, for example visually via a display unit of the Control device or acoustically as an audio signal by means of the control device.
- the length of the character string is chosen so that it can still be entered comfortably by the operator, but so long that the license information cannot be entered validly by guessing. Provision can be made to provide the operator with the expected format or the structural structure of the
- Character string (e.g. the length of the character string; sections in which only numbers are provided; sections in which only letters are provided; etc.) in advance, e.g. by making a corresponding entry in the operating instructions so that the operator can quickly establish an initial plausibility the license information issued to him.
- deactivation using the method according to the invention is also possible.
- a hardware and / or software functionality can be run in a restricted mode.
- the hardware and / or software functionality is only activated temporarily for a predetermined period of time. After the time has elapsed, the hardware and / or software functionality is deactivated and must be activated again using the method described in claim 1. It can be provided that the duration is already specified in the software or in the hardware. Alternatively, the duration is encoded in the alphanumeric data sequence of the first license information item.
- predetermined character length from the server to the operating device
- Automation component and xviii.
- a confirmation request is sent to the server in the manner described above.
- an optical code in particular a QR code, a flicker code, or a barcode
- a display unit in particular a display
- any other type of optical code can of course be used.
- the operating device has a camera and that the reaction-free unidirectional data channel is formed in that the camera detects the first optical code or the second optical code. In this way, it is not possible for the operator to access the automation component from the operator panel via the data channel.
- an acoustic reproduction means is used as the output unit and that an acoustic frequency-modulated and / or amplitude-modulated audio signal is used as the first code and / or as the second code.
- Frequency shift keying modulation, multi-frequency coding or pulse code modulation can also be used.
- the operating device has an acoustic recording means, in particular a microphone, and that the reaction-free unidirectional data channel is formed by the acoustic recording means receiving the first acoustic code or the second acoustic code , listen in.
- the first or second code can also be transmitted via electromagnetic transmission. It must be ensured here that the transmission channel is designed exclusively unidirectional.
- the activation or deactivation of the hardware and / or software functionality also only takes place in the event that the input of the first license information issued is within a predetermined time interval after the identification information has been generated
- Automation component takes place. If the first license information is only entered after the specified time interval, the procedure must be repeated.
- Software functionality also only takes place in the event that the second license information item issued is entered within a predetermined time interval after the generation of the
- the possibility of manipulating the method is further reduced. Since the license information to be entered is an alphanumeric data sequence with a short length (for example between 6 and 8 characters), an operator could enter the license information validly by guessing. Setting a time limit reduces the chance of successful guessing.
- a laptop or a mobile terminal device is used as the operating device.
- mobile phone any mobile device.
- End devices are, for example, smartphones or tablet PCs.
- the operating device is in communication with the server via the Internet.
- a field device is used as the automation component for detecting or setting a variable of a procedural process by means of a basic functionality, the hardware and / or software functionality being one of the following: Specific measurement functionality;
- input units are used for keys on the field device housing.
- the automation component used is an operating unit on which an operating application for a field device is implemented, the hardware and / or
- the operating unit is, for example, a higher-level unit in the sense of a control system PC or a control unit, or else a PC or laptop or a mobile one Control device in the sense of the "Field Xperts" produced and sold by the applicant, or a mobile device, for example in the sense of the "SMT70" tablet marketed by the applicant.
- the operating application is, for example, a frame application
- Fig. 1 an embodiment of the method according to the invention.
- a first-time use of an automation component AK is described by the customer.
- the automation component AK is an SMT70 tablet which is used to operate a field device.
- operating means reading or writing parameter values of the field device, reading out by the
- Identification data of the field device reading out diagnostic data of the field device, etc.
- an operating program is implemented on the automation component AK, for example an FDT frame application on which a device driver (DTM, “Device Type Manager”) of the field device is loaded.
- DTM device driver
- Control unit BG here in the form of a smartphone, which itself has access to the Internet and which receives the data required for checking the license from the
- Automation component AK can procure without being able to access them themselves.
- the automation component is generated
- Identification information of the operating software and the automation component can be acquired as required.
- the automation component AK provides the identification information via an output unit AE as a machine-interpretable code CD for retrieval.
- the machine-interpretable code CD in this example is a QR code.
- the output unit AE is a touchscreen, which can also serve as an input unit EE, which displays the QR code.
- Automation component a countdown, within which the input of first license information is expected in the input unit EE.
- the operating device BG reads in the code CD using a camera and interprets it, i.e. that the control unit contains the CD contained in the code
- the operating device BG then transmits in method step iv) the
- the license information is then transmitted to the operating device BG in a method step vi).
- an eight-digit string (“x24a std6") is shown on the display of the operator panel BG.
- step vii) the operator enters this character string on the input unit EE, that is to say the touchscreen, the automation component.
- the automation component carries out a plausibility test if the character string was entered within the countdown.
- the plausibility check includes, for example, checking a checksum contained in the character string.
- the operating software is activated temporarily in a method step ix), for example for a period of two weeks.
- the operator can now operate the field device using the automation component.
- the method according to the invention must be repeated within a period of two weeks:
- the automation component In method step x), the automation component generates a confirmation request or request for the license server that the operating program has been temporarily activated.
- the automation component AK makes the confirmation request via an output unit AE as a machine-interpretable code CD on the output unit AE ready for retrieval.
- the machine-interpretable code CD is again a QR code.
- the operating device BG reads the code CD by means of the camera and interprets it, i.e. that the control unit contains the CD contained in the code
- the operating device BG then transmits in method step xiii) the
- the confirmation information is then transmitted to the operating device BG in a method step xv). This in turn outputs the confirmation information in the form of an alphanumeric character string using the display.
- step xvi) the operator enters this character string on the input unit EE, that is to say on the touchscreen, the automation component AK.
- method step xvii the automation component carries out a plausibility test if the character string was entered within the countdown. If the plausibility check is successful, the operating software is activated permanently in a method step xviii). It is then no longer necessary to send information to the server SE.
Landscapes
- Engineering & Computer Science (AREA)
- Software Systems (AREA)
- General Physics & Mathematics (AREA)
- Theoretical Computer Science (AREA)
- Physics & Mathematics (AREA)
- Technology Law (AREA)
- Multimedia (AREA)
- Computer Hardware Design (AREA)
- Computer Security & Cryptography (AREA)
- General Engineering & Computer Science (AREA)
- Automation & Control Theory (AREA)
- Stored Programmes (AREA)
- Debugging And Monitoring (AREA)
Abstract
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| DE102019116209.2A DE102019116209A1 (de) | 2019-06-14 | 2019-06-14 | Verfahren zum Aktivieren oder Deaktivieren zumindest einer Hardware- und/oder Softwarefunktionalität einer Automatisierungskomponente |
| PCT/EP2020/062534 WO2020249323A1 (fr) | 2019-06-14 | 2020-05-06 | Procédé d'activation ou de désactivation d'au moins une fonctionnalité matérielle et/ou logicielle d'un composant d'automatisation |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| EP3983854A1 true EP3983854A1 (fr) | 2022-04-20 |
Family
ID=70483147
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| EP20723861.9A Withdrawn EP3983854A1 (fr) | 2019-06-14 | 2020-05-06 | Procédé d'activation ou de désactivation d'au moins une fonctionnalité matérielle et/ou logicielle d'un composant d'automatisation |
Country Status (5)
| Country | Link |
|---|---|
| US (1) | US20220365506A1 (fr) |
| EP (1) | EP3983854A1 (fr) |
| CN (1) | CN113950646A (fr) |
| DE (1) | DE102019116209A1 (fr) |
| WO (1) | WO2020249323A1 (fr) |
Families Citing this family (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| LU102418B1 (de) * | 2021-01-12 | 2022-07-12 | Phoenix Contact Gmbh & Co | Technik zur Validierung einer Sicherheitsfunktion einer Steuerung |
| DE102022100708A1 (de) | 2022-01-13 | 2023-07-13 | Turck Holding Gmbh | Verfahren zur Änderung von Softwaredaten eines Feldgerätes und eine ein solches Feldgerät umfassende Anlage |
| DE102022102662A1 (de) | 2022-02-04 | 2023-08-10 | Krohne Messtechnik Gmbh | Verfahren zur sicheren Freigabe einer Kommunikationsverbindung zwischen einem Feldgerät und einem Bediengerät und ein entsprechendes Feldgerät |
| DE112022005189B4 (de) * | 2022-02-10 | 2025-07-17 | Mitsubishi Electric Corporation | Kommunikationssystem, Lizenzmanagementsystem, mobiles Endgerät, Kommunikationsverfahren, Kommunikationsprogramm für ein mobiles Endgerät und Steuervorrichtung |
| US12081565B2 (en) | 2022-11-14 | 2024-09-03 | Rockwell Automation Technologies, Inc. | Facilitating direct device-to-cloud communications within a secure deployment management system |
| US12085921B2 (en) * | 2022-11-14 | 2024-09-10 | Rockwell Automation Technologies, Inc. | Managing firmware and software updates within a secure deployment system |
| DE102023122743A1 (de) * | 2023-08-24 | 2025-02-27 | Endress + Hauser Process Solutions Ag | Aktivierungsverwaltung für das Steuerungsprogramm in Steuerelementen |
| DE102023123828A1 (de) | 2023-09-05 | 2025-03-06 | Vega Grieshaber Kg | Messgerät und Verfahren zum Messen eines Füllstands, eines Grenzstands und/oder eines Drucks mit Betriebsberechtigungskontrolle |
| DE102023136446A1 (de) * | 2023-12-22 | 2025-06-26 | Endress+Hauser Process Solutions Ag | Verfahren zum Erstellen eines Geräteberichts eines Feldgeräts sowie System zum Erstellen eines Geräteberichts eines Feldgeräts |
Family Cites Families (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US8271336B2 (en) * | 1999-11-22 | 2012-09-18 | Accenture Global Services Gmbh | Increased visibility during order management in a network-based supply chain environment |
| US8620818B2 (en) * | 2007-06-25 | 2013-12-31 | Microsoft Corporation | Activation system architecture |
| US20110098030A1 (en) * | 2009-10-27 | 2011-04-28 | Nokia Corporation | Method and apparatus for activating services |
| US8990142B2 (en) * | 2009-10-30 | 2015-03-24 | The Nielsen Company (Us), Llc | Distributed audience measurement systems and methods |
| DE102009055093A1 (de) * | 2009-12-21 | 2011-06-22 | Endress + Hauser Conducta Gesellschaft für Mess- und Regeltechnik mbH + Co. KG, 70839 | Feldgerät |
| DE102011079890A1 (de) * | 2011-07-27 | 2013-01-31 | Codewrights Gmbh | System und Verfahren zur Bedienung von Feldgeräten in einer Automatisierungsanlage |
| ES2461626T3 (es) * | 2011-09-20 | 2014-05-20 | Miele & Cie. Kg | Procedimiento para operar un aparato doméstico y sistema con un tal aparato doméstico |
| DE102012214018B3 (de) * | 2012-08-07 | 2014-02-13 | Siemens Aktiengesellschaft | Autorisierung eines Nutzers durch ein tragbares Kommunikationsgerät |
| DE102013013299A1 (de) * | 2013-08-12 | 2015-02-12 | Endress + Hauser Conducta Gesellschaft für Mess- und Regeltechnik mbH + Co. KG | Verfahren zum Bedienen eines Feldgeräts |
| US9892355B2 (en) * | 2015-05-20 | 2018-02-13 | The Code Corporation | Barcode-reading system |
-
2019
- 2019-06-14 DE DE102019116209.2A patent/DE102019116209A1/de not_active Withdrawn
-
2020
- 2020-05-06 US US17/618,978 patent/US20220365506A1/en active Pending
- 2020-05-06 CN CN202080042896.3A patent/CN113950646A/zh active Pending
- 2020-05-06 EP EP20723861.9A patent/EP3983854A1/fr not_active Withdrawn
- 2020-05-06 WO PCT/EP2020/062534 patent/WO2020249323A1/fr not_active Ceased
Also Published As
| Publication number | Publication date |
|---|---|
| WO2020249323A1 (fr) | 2020-12-17 |
| DE102019116209A1 (de) | 2020-12-17 |
| US20220365506A1 (en) | 2022-11-17 |
| CN113950646A (zh) | 2022-01-18 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| EP3983854A1 (fr) | Procédé d'activation ou de désactivation d'au moins une fonctionnalité matérielle et/ou logicielle d'un composant d'automatisation | |
| DE102004011162A1 (de) | Verknüpfungsautomatik von Prozess-Ereignisdaten zu einem Datenarchivsystem | |
| DE102008027935A1 (de) | Vorrichtung zur Integration von Geräteobjekten in eine übergeordnete Steuereinheit | |
| EP1658538B1 (fr) | Procede pour generer des modules logiciels pour des appareils de terrain de la technique d'automatisation de processus | |
| EP3607405B1 (fr) | Procédé de paramétrage d'un appareil de terrain et appareil de terrain paramétrable | |
| WO2008012164A1 (fr) | Procédé pour déconnecter des fonctionnalités particulières dans des appareils de terrain en technique d'automatisation | |
| WO2009074544A1 (fr) | Procédé pour faire fonctionner un système présentant un appareil de terrain et un système de commande | |
| EP1108984A1 (fr) | Appareil mobile programmable | |
| WO2016026622A1 (fr) | Procédé de paramétrage d'un appareil de terrain | |
| EP2701019B1 (fr) | Procédé de paramétrage d'un appareil de terrain, appareil de terrain correspondant et système de paramétrage | |
| DE102015114442A1 (de) | Verfahren zur Aktivierung einer inaktiven Schnittstelle an einem Feldgerät der Prozessautomatisierung | |
| WO2012136457A1 (fr) | Dispositif et système pour la détermination, l'optimisation ou la surveillance d'au moins une grandeur de processus | |
| WO2023041400A1 (fr) | Procédé de capture de résultats d'une évaluation, d'un diagnostic et/ou d'un contrôle d'au moins une fonctionnalité de dispositif d'un dispositif de terrain | |
| DE102019134895A1 (de) | Verfahren zum rückführungsfreien Übertragen feldgerätebezogener Daten | |
| EP3555717B1 (fr) | Unité d'exploitation pour appareil de terrain de la technologie d'automatisation | |
| DE102016107045B4 (de) | Verfahren und System zum sicheren Konfigurieren eines Feldgeräts der Prozessautomatisierung | |
| EP2876514A1 (fr) | Contrôle du fonctionnement d'appareils techniques d'un système d'automatisation de processus industriel par un test de boucle | |
| EP4432034B1 (fr) | Procédé et système de détection d'une configuration d'un contrôleur de sécurité modulaire | |
| EP1363175A1 (fr) | Système d'automatisation ou appareil de diagnostic pour un ou plusieurs composants d'une installation et méthode d'opération d'un tel système | |
| WO2016087149A1 (fr) | Procédé d'écrasement d'une mémoire non volatile d'un appareil de terrain | |
| WO2012028366A1 (fr) | Procédé garantissant le mode de fonctionnement correct d'une installation d'automatisation | |
| EP4078916B1 (fr) | Transfert de configuration de sécurité d'un premier à un deuxième appareil de terrain | |
| DE102016110723A1 (de) | Verfahren zum Verhindern eines unerlaubten Zugriffs auf Softwareanwendungen in Feldgeräten | |
| WO2023156142A1 (fr) | Procédé de vérification de l'authenticité d'un micrologiciel d'un appareil de terrain en technique d'automatisation | |
| WO2023186666A1 (fr) | Procédé pour effectuer des vérifications de sécurité sur un contrôleur de sécurité modulaire |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: UNKNOWN |
|
| STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: THE INTERNATIONAL PUBLICATION HAS BEEN MADE |
|
| PUAI | Public reference made under article 153(3) epc to a published international application that has entered the european phase |
Free format text: ORIGINAL CODE: 0009012 |
|
| STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: REQUEST FOR EXAMINATION WAS MADE |
|
| 17P | Request for examination filed |
Effective date: 20211124 |
|
| AK | Designated contracting states |
Kind code of ref document: A1 Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR |
|
| DAV | Request for validation of the european patent (deleted) | ||
| DAX | Request for extension of the european patent (deleted) | ||
| STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: EXAMINATION IS IN PROGRESS |
|
| 17Q | First examination report despatched |
Effective date: 20221223 |
|
| STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN |
|
| 18D | Application deemed to be withdrawn |
Effective date: 20230503 |