Automation system access control system and method

• US 8,949,970 B2
• Filed: 10/31/2012
• Issued: 02/03/2015
• Est. Priority Date: 10/31/2012
• Status: Active Grant

• Current Assignee: Rockwell Automation Technologies Incorporated (Allen-Bradley Co., Inc.)
• Original Assignee: Rockwell Automation Technologies Incorporated (Allen-Bradley Co., Inc.)
• Inventors: Bush, Michael A., Brandt, Robert
• Primary Examiner(s): REVAK, CHRISTOPHER A
• Application Number:
  US13/665,817
• Publication Number:
  US 20140123276A1
• Time in Patent Office: 825 Days
• Field of Search: None
• US Class Current: 726/17
• CPC Class Codes: G05B 15/02 electric
• CPC Class Codes: G05B 19/0425 Safety, monitoring
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

An improved system and method for controlling access of components to industrial automation system resources by reference to the various operational states of the industrial automation system. A central access control system includes a processing circuitry, interface circuitry configured to receive information pertaining to the operational state of an automation system, memory circuitry, and a display and user interface. In operation, access to automation components are either allowed or denied based on the designation of an operational state of an automation system.

Claims

1. A method for controlling access to an industrial automation system, comprising:

determining an operational state of the industrial automation system from a plurality of operational states, wherein the plurality of operational states comprises a commissioning or maintenance state and a production state, wherein the industrial automation system is configured to not produce a product when in the commissioning or maintenance state and to produce the product when in the production state;

receiving a request to access the industrial automation system from an accessing component configured to interact with the industrial automation system or an industrial automation component of the industrial automation system;

determining whether the accessing component is authorized to access the industrial automation system based upon the operational state; and

permitting or denying access to the industrial automation system based upon the authorization determination.

2. The method of claim 1, wherein permitting access to the industrial automation system comprises permitting access to a directory of industrial automation components.

3. The method of claim 1, wherein operation of the industrial automation system is suspended when the industrial automation system is in the commissioning or maintenance state.

4. The method of claim 1, wherein the operational state is automatically set by the industrial automation system.

5. The method of claim 1, wherein criteria used in the commissioning or maintenance state to determine whether the accessing component is authorized are less restrictive than criteria use in the production state to determine whether the accessing component is authorized.

6. The method of claim 1, wherein the accessing component is logged during the commissioning or maintenance state and is thereafter permitted access to the industrial automation system during the production state unless disallowed by an administrator.

7. The method of claim 1, wherein accessing components not logged during the commissioning or maintenance state are thereafter denied access to the industrial automation system during the production state unless permitted by an administrator.

8. The method of claim 1, wherein accessing components denied access can be allowed access by a system administrator.

9. The method of claim 1, wherein criteria used to permit or deny access comprise user identifying data, accessing component identifying data, application data, application version data, application publisher data, or any combination thereof.

10. A method for controlling access to an industrial automation system, comprising:

permitting access to the industrial automation system based upon first criteria when the industrial automation system is in a commissioning or maintenance state, wherein the industrial automation system is configured to not produce a product when in the commissioning or maintenance state;

logging accessing components that access the industrial automation system during the commissioning or maintenance state;

changing the state of the industrial automation system to a production state, wherein the industrial automation system is configured to produce the product when in the production state; and

permitting access to the industrial automation system based upon second criteria during the production state, wherein the second criteria are more restrictive than the first criteria.

11. The method of claim 10, wherein the first criteria comprise free access to the industrial automation system.

12. The method of claim 10, wherein permitting access to the industrial automation system comprises permitting access to a directory of industrial automation components.

13. A system for controlling access to an industrial automation system, comprising:

a state determination component configured to determine an operational state of the industrial automation system from a plurality of operating states, wherein the plurality of operational states comprises a commissioning or maintenance state and a production state, wherein the industrial automation system is configured to not produce a product when in the commissioning or maintenance state and to produce the product when in the production state;

a receiving component configured to receive a request to access the industrial automation system from an accessing component that can interact with the industrial automation system or an industrial automation component of the automation system; and

an access control component configured to determine whether the accessing component is authorized to access the industrial automation system based upon the operational state and to permit or deny access to the industrial automation system based upon the authorization determination.

14. The system of claim 13, wherein the industrial automation system comprises a directory of industrial automation components, wherein the access control component is configured to permit or deny access to the directory.

15. The system of claim 13, wherein operation of the industrial automation system is suspended when the industrial automation system is in the commissioning or maintenance state.

16. The system of claim 13, wherein the operational state is automatically set by the industrial automation system.

17. The system of claim 13, wherein the access control component is configured to utilize criteria to determine whether the accessing component is authorized, wherein the criteria used in the commissioning or maintenance state are less restrictive than the criteria used in the production state.

18. The system of claim 13, wherein the access control component is configured to log accessing components during the commissioning or maintenance state and to permit access to the logged accessing components during the production state unless disallowed by an administrator.

19. The system of claim 13, wherein the access control component is configured deny access to accessing components not logged during the commissioning or maintenance state during the production state unless permitted by an administrator.

20. The system of claim 13, wherein criteria used to permit or deny access comprise user identifying data, accessing component identifying data, application data, application version data, application publisher data, or any combination thereof.