Method for securing the exchange of data between an external access unit and field device

• US 8,745,692 B2
• Filed: 09/11/2002
• Issued: 06/03/2014
• Est. Priority Date: 09/12/2001
• Status: Expired due to Fees

• Current Assignee: Endress+Hauser Process Solutions AG
• Original Assignee: Endress+Hauser Process Solutions AG
• Inventors: Grittke, Udo, Seiler, Christian
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): BAYOU, YONAS A
• Application Number:
  US10/488,258
• Publication Number:
  US 20050033886A1
• Time in Patent Office: 4,283 Days
• Field of Search: 726/2
• US Class Current: 726/2
• CPC Class Codes: G05B 2219/24154 Password with time limited access to system, protect protocol
• CPC Class Codes: G05B 2219/24157 Block, inhibit certain inputs by entering certain keycode
• CPC Class Codes: G05B 2219/24167 Encryption, password, user access privileges
• CPC Class Codes: G05B 2219/31104 Remote configuration of parameters of controlled devices
• CPC Class Codes: G05B 2219/31121 Fielddevice, field controller, interface connected to fieldbus
• CPC Class Codes: G05B 2219/34038 Web, http, ftp, internet, intranet server
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

A method for safe data communication via WAN, LAN (e.g. Internet) between at least one external access unit and a field device, or a field bus adapter for determining or monitoring at least one physical or chemical process parameter. According to the method unauthorized accessing of a field device, or a field bus adapter, in the field is blocked in that the operator of the field device or the field bus adapter permits the external access unit to have targeted access to the field device, or the field bus adapter.

Claims

1. A method for safe data communication via WAN (Wide Area Network) or LAN (Local Area Network) between a remote access unit and a field device for determining or monitoring at least one physical or chemical process parameter, comprising the steps of:

permitting an on-site operator of the field device or the field bus adapter to allow a remote operator of the remote access unit a targeted access to the field device or the field bus adapter;

activating by the on-site operator an actuating element at the field device or the field bus adapter in order to enable a remote accessing of the field device or the field bus adapter to the remote operator for a defined time span; and

servicing the field device or the field bus adapter during the defined time span via the remote access unit.

2. The method as defined in claim 1, further comprising the steps of:

predetermining different variants of access authorizations; and

choosing among the different variants of access authorization, so that the safety standard desired for the field device or the field bus adapter by the operator is guaranteed.

3. The method as defined in claim 2, wherein:

the chosen access authorization is issued using hardware and/or software.

4. The method as defined in claim 2, wherein:

the access authorizations authorize the read-out of data and/or the configuring and/or parametering of the field device, or the plurality of field devices.

5. The method as defined in claim 1, wherein:

an external accessing of the field device or the field bus adapter is only possible, when an agreed-upon password is named from the external access unit.

6. The method as defined in claim 1, wherein:

an external accessing of the field device or the field bus adapter is only possible, when the external access unit has a predetermined IP-address.

7. The method as defined in claim 6, wherein:

the control authority is, one of;

customs, the tax office, and an environmental authority.

8. The method as defined in claim 6, wherein:

the IP-address of the external access unit is stored.

9. The method as defined in claim 1, wherein:

an external accessing of the field device or the field bus adapter is only possible, when the external access unit uses a predetermined encryption method.

10. The method as defined in claim 9, wherein:

the SSL (Secure Sockets Layer) method is used as an encryption-/authentication-method.

11. The method as defined in claim 1, wherein:

the external access unit is operated by the service personnel or a control authority.

12. A method for safe data communication via WAN or LAN between a remote access unit and a field bus adapter, for data capture from, or control of, a plurality of field devices which serve for determining or monitoring at least one physical or chemical process parameter, comprising the steps of:

permitting an on-site operator of the field bus adapter to allow a remote operator of the remote access unit a targeted access to the field bus adapter;

activating by the on-site operator an actuating element at the the field bus adapter in order to enable a remote accessing of the field bus adapter to the remote operator for a defined time span; and

servicing the field bus adapter during the defined time span via the remote access unit.

13. The method as defined in claim 12, further comprising the steps of:

predetermining different variants of access authorizations; and

choosing among the different variants of access authorizations, so that the safety standard desired for the field device or the field bus adapter by the operator is guaranteed.

14. The method as defined in claim 13, wherein:

the access authorizations authorize the read-out of data and/or the configuring and/or parametering of the field device, or the plurality of field devices, as the case may be.

15. The method as defined in claim 12, wherein:

the chosen access authorization is issued using hardware and/or software.

16. The method as defined in claim 12, wherein:

an external accessing of the field device or the field bus adapter is only possible, when an agreed - upon password is named from the eternal access unit.

17. The method as defined in claim 12, wherein:

an external accessing of the field device or the field bus adapter is only possible, when the external access unit has a predetermined IP-address.

18. The method as defined in claim 17, wherein:

the control authority is, one of;

customs, the tax office, and an environmental authority.

19. The method as defined in claim 17, wherein:

the IP-address of the external access unit is stored.

20. The method as defined in claim 12, wherein:

an external access of the field deice or the field bus adapter is only possible, when the external access unit uses a predetermined encryption method.

21. The method as defined in claim 20, wherein:

the SSL method is used as the encryption-/authenticating-method.

22. The method as defined in claim 12, wherein:

the external access unit is operated by the service personnel or a control authority.