System and method for secure remote access

• US 7,761,551 B2
• Filed: 10/22/2007
• Issued: 07/20/2010
• Est. Priority Date: 04/22/2005
• Status: Active Grant

• Current Assignee: Trumpf Laser GMBH + Company KG (Trumpf GmbH + Company KG)
• Original Assignee: Trumpf Laser GMBH + Company KG (Trumpf GmbH + Company KG)
• Inventors: Thieringer, Rainer
• Primary Examiner(s): Jacobs; Lashonda T
• Application Number:
  US11/876,350
• Publication Number:
  US 20080091794A1
• Time in Patent Office: 1,002 Days
• Field of Search: 709/223, 709/224, 709/203, 709/217, 709/219
• US Class Current: 709/223
• CPC Class Codes: G05B 19/042 using digital processors G05B19/05 takes precedence
• CPC Class Codes: G05B 19/4185 characterised by the network communication
• CPC Class Codes: G05B 2219/25217 Configure communication protocol, select between several
• CPC Class Codes: G05B 2219/31174 Load, use different protocols, formats, emulators for different systems
• CPC Class Codes: G05B 2219/31211 Communicate diagnostic data from intelligent field device controller to central
• CPC Class Codes: Y02P 90/02 Total factory control, e.g. smart factories, flexible manufacturing systems [FMS] or integrated manufacturing systems [IMS]

Abstract

A system provides for remote communication between a service computer and a machine control at a machine. The system includes at least one central computer that is protected by a Firewall, a connection between the service computer and the central computer, and communication connections that are allocated to each of the machine controls. The at least one central computer includes a plurality of virtual computers. Each communication connection is associated with a virtual computer. The central computer can be connected to a particular machine control through the virtual computer that is set up for the communication connection allocated to the particular machine control.

Claims

1. A system for remote communication between a service computer and a machine control at a machine, the system comprising:

at least one central computer that is protected by a Firewall, wherein the at least one central computer comprises a plurality of virtual computers that are configured to be run simultaneously,

a connection between the service computer and the central computer, and

communication connections that are allocated to each of the machine controls, where each communication connection is associated with a virtual computer,

wherein the central computer is configured to be connected to a particular machine control through the virtual computer that is set up for the communication connection allocated to the particular machine control.

2. The system of claim 1, wherein the connection between the service computer and the central computer only permits transmission of pixel information, mouse movements, and keyboard movements.

3. The system of claim 1, wherein the connection between the service computer and the central computer is realized using remote desktop protocol (RDP).

4. The system of claim 3, wherein the connection between the service computer and the central computer is realized using Windows Terminal Services.

5. The system of claim 1, wherein the central computer is connected to the Intranet of the manufacturer of the machine or to the Intranet of a service operator through the Firewall, and the Intranet of the machine manufacturer or of the service operator is connected to the Internet through another Firewall.

6. The system of claim 1, wherein the allocation between the machine controls and their respective communication connections is stored in the central computer or in a database connected to the central computer.

7. The system of claim 1, wherein the communication connection between the central computer and the respective machine control includes a connection through the Internet.

8. The system of claim 7, wherein the communication connection between the central computer and the respective machine control includes a connection through a VPN connection.

9. The system of claim 1, wherein the connection between the service computer and the central computer includes a connection through the Intranet of the machine manufacturer or of a service operator.

10. The system of claim 1, wherein the connection between the service computer and the central computer includes a connection through the Internet.

11. The system of claim 10, wherein the connection between the service computer and the central computer includes a connection through a VPN connection.

12. The system of claim 1, wherein the virtual computers of the central computer have different applications, where such applications includes one or more of operating systems, application programs, and virus protection programs.

13. The system of claim 12, wherein the one or more of the application programs serve to establish the communication connection between the central computer and the machine control.

14. The system of claim 1, wherein the communication connections between the virtual computers and the machine control are identical.

15. The system of claim 1, wherein the communication connections between the virtual computers and the machine control are different from each other.

16. The system of claim 1, wherein the virtual computers can be operated simultaneously.

17. A remote communication method between a service computer and a machine control for a machine, the method comprising:

protecting a central computer with a Firewall;

establishing a connection between the service computer and the central computer,

determining a communication connection allocated to the desired machine control,

selecting a virtual computer from a plurality of virtual computers at the central computer, wherein selecting the virtual computer includes selecting the virtual computer that is set up for the communication connection determined to be allocated to the machine control such that the communication connection links the desired machine control to the selected virtual computer, and

starting the selected virtual computer.

18. The method of claim 17, wherein the connection between the service computer and the central computer permits only transmission of pixel information, mouse movements, and keyboard movements.

19. The method of claim 17, further comprising enabling a user at the service computer to perform functions at the machine control through the communication connection.

20. The method of claim 17, further comprising enabling a user at the service computer to exchange data between the machine control and the central computer.

21. The method of claim 17, further comprising connecting the central computer to the Intranet associated with the machine through the Firewall.

22. The method of claim 21, further comprising connecting the machine Intranet to the Internet through another Firewall.

23. The method of claim 17, wherein determining the communication connection allocated to the desired machine control includes determining based on data stored in the central computer.

24. The method of claim 17, wherein the communication connection includes a VPN connection or the Internet.

25. A system for remote communication between a service computer and a machine control at a machine, the system comprising:

at least one central computer that is protected by a Firewall,

a connection between the service computer and the central computer,

communication connections that are allocated to each of the machine controls, and

a plurality of virtual computers within the at least one central computer, where the virtual computers are configured to be run simultaneously and each virtual computer is set up for an associated communication connection,

wherein the central computer is configured to be connected to a particular machine control through the virtual computer that is set up for the communication connection allocated to the particular machine control.