DE102011117186A1 - Method for controlling access to actuator or sensor in private or industrial sectors, involves verifying authority proof when information about access rights is analyzed by authorization functional unit of access control point - Google Patents

Abstract

The method involves establishing proof of authority and information about access rights in electronic form, and storing the proof of authority including the information about the access rights on an authorization medium (4) in a data storage (5). The proof of authority is transferred to a third party medium (6). The proof of authority is verified by testing when the information about the access rights is analyzed by the authorization functional unit of an access control point (3), and the third party is authorized for the access to the actuator or sensor in the frame of access rights.

Description

The present invention relates to a method for controlling access to an actuator and / or sensor.

Due to the high, still increasing degree of automation in private as well as in the industrial sector, more and more actuators and sensors are being used in these areas.

Actuators convert electrical signals that receive the actuators from a controller into mechanical motion or other physical quantities such as pressure or temperature. An example of a signal conversion by an actuator is the opening and closing of a door or a valve due to an electrical signal transmitted to the actuator.

Sensors detect qualitatively or quantitatively a certain physical or chemical properties (eg temperature, humidity, pressure, brightness and acceleration) and / or a material condition in an environment around the sensors. The recorded results are then converted into further processible variables, such as. As electrical signals, reshaped.

An overview of the functioning and applications of actuators and sensors is provided "Sensors and actuators - control system instrumentation" by Clarence W. De Silva, published by CRC Press on January 24, 2007 (ISBN 978-1-420-04483-6) ,

The access to actuators and sensors of the type in question is now controlled mostly by electronic means. It is important to allow access only on the part of a person entitled to do so. Corresponding methods are summarized under the term access control. An important role in access control is played by authentication and authorization.

Authentication verifies the identity of a third party. The third party may be a person, a device, a document, an information or even a software program. For the verification or verification of the identity of the third party z. For example, a credential (often username and password) may be compared to a list of known data.

After authentication of the third party follows a process of authorization. It is decided on the basis of a credential, if and to what extent the authenticated third party access is granted. Thus, based on specified access rights, the third z. B. be authorized to access only a particular component or function of an actuator or sensor.

Are known methods for electronic access control, in which the credential must be physically replaced at least once before an authorized access, such. As a smart card, an RFID tag or a fingerprint. Exemplary here is the US 2005/0055582 A1 mentioned.

In addition, methods for electronic access control are known, which allow remote access to an actuator and / or sensor. An example of this is the EP 1 217 475 A2 at. However, there are often cases that require access to an actuator or sensor at its physical location. So z. As a maintenance, inspection, repair or improvement of an actuator or sensor or of technical systems, components, devices or resources that require access to an actuator or sensor, often possible only at the location of the actuator or sensor.

Object of the present invention is to provide a method which allows a third party to authorize access to an actuator and / or sensor at the location of the actuator or sensor, the authorization of the third party for already to access the actuator and / or sensor Authorized in a simple manner and regardless of the location of the actuator, the sensor and the third party should be possible.

The above object is achieved by a method according to claim 1. Advantageous developments are the subject of the dependent claims.

Essential for the inventive method is that the actuator and / or sensor are connected to an access control point / is. The access control point has an authorization functional unit for authorizing access attempts to the actuator and / or sensor.

• a) Zunächst werden von einem bereits zum Zugriff auf den Aktor und/oder Sensor Berechtigten für einen zu autorisierenden Dritten in elektronischer Form ein Berechtigungsnachweis sowie Informationen über Zugriffsrechte, wie eine erlaubte Anzahl, ein erlaubter Zeitraum und ein erlaubter Umfang eines Zugriffs auf den Aktor und/oder Sensor, erstellt.
• b) Anschließend wird der Berechtigungsnachweis samt den Informationen über die Zugriffsrechte auf einem Medium des Berechtigten mit einem Datenspeicher gespeichert.
• c) Anschließend wird der Berechtigungsnachweis samt den Informationen über die Zugriffsrechte in elektronischer Form an ein Medium des Dritten mit einem Datenspeicher übermittelt und nach Erhalt auf dem Datenspeicher des Mediums des Dritten gespeichert.
• d) Bei einem späteren Zugriffsversuch des Dritten auf den Aktor und/oder Sensor wird der Berechtigungsnachweis samt den Informationen über die Zugriffsrechte aus dem Datenspeicher des Mediums des Dritten ausgelesen, an den Zugriffskontrollpunkt übermittelt und nach Erhalt auf einem Datenspeicher des Zugriffskontrollpunkts gespeichert.
• e) Nach oder während Speicherung des Berechtigungsnachweises samt den Informationen über die Zugriffsrechte wird durch die Autorisierungsfunktionseinheit des Zugriffskontrollpunkts der Berechtigungsnachweis überprüft.
• f) Wird durch die Überprüfung der Berechtigungsnachweis verifiziert, werden durch die Autorisierungsfunktionseinheit des Zugriffskontrollpunkts die Informationen über die Zugriffsrechte analysiert und der Dritte wird für einen Zugriff auf den Aktor und/oder Sensor im Rahmen der Zugriffsrechte autorisiert.
• g) Wird der Berechtigungsnachweis durch die Überprüfung nicht verifiziert, wird dem Dritten ein Zugriff auf den Aktor und/oder Sensor durch den Zugriffskontrollpunkt verwehrt.

The inventive method has in its basic embodiment the following process steps:

• a) First of all, an authorized user for access to the actuator and / or sensor for a third party to be authorized in electronic form a credential and information about access rights, such as a permitted number, a permitted period and a permitted amount of access to the actor and / or sensor, created.
• b) Subsequently, the credentials including the information about the access rights are stored on a medium of the claimant with a data store.
• c) Subsequently, the credentials including the information about the access rights are transmitted in electronic form to a medium of the third party with a data store and stored on receipt of the data storage of the medium of the third party.
• d) In a later attempt to access the third party on the actuator and / or sensor of the credentials including the information about the access rights from the data memory of the medium of the third read out, transmitted to the access control point and stored after receipt on a data store of the access control point.
• e) After or during storage of the credentials, together with the information about the access rights, the authorization proof of the access control point verifies the credentials.
• f) If verified by the verification of the credential, the authorization function unit of the access control point, the information about the access rights are analyzed and the third party is authorized for access to the actuator and / or sensor under the access rights.
• g) If verification does not verify the credential, the third party will be denied access to the actuator and / or sensor by the access control point.

This method allows a comprehensive and secure allocation of access authorization among all parties involved in the proceedings, namely the authorized party, the access control point and the third party, without disturbing the temporal asynchronicity of the method steps described, wherein the method steps can be independent of location and independent of one another.

Thus, with this method, the third party can be authorized to access actuators and / or sensors, even if a large spatial distance exists between the authorized person and the third party at the time of transmission of the authorization. So z. B. the claimant, who is on vacation or on a business trip away from his house, allow a craftsman access to one or more actuators and / or sensors in the house of the claimant in his absence.

The method according to the invention can be further developed and developed in a multitude of directions. For this purpose, reference may be made to the dependent claims.

The invention will be explained in more detail with reference to the explanations of particularly preferred embodiments with reference to the drawings. In the drawing, the single figure shows in schematic form components with which the inventive method can be realized. In principle, the teaching of the invention also applies to other components.

The embodiment shown in the drawing shows an example of an actuator 1 an engine 1a for shutters and a heating actuator 1b for switching on and off a heater. Furthermore, in the drawing as an example of a sensor 2 a brightness sensor 2a and a thermocouple 2 B shown. The thermocouple 2 B has two different, interconnected at one end metals, wherein at a temperature difference, a heat flow and a thermoelectric voltage are caused. The actors 1a . 1b and sensors 2a . 2 B are with an access control point 3 connected in each case via a cable or wirelessly, preferably in a local network.

The access control point 3 has a data store 8th on which data can be stored semi-permanently. Semi-permanent storage means that information can be stored permanently, but can also be changed.

Furthermore, the access control point points 3 an unillustrated authorization functional unit. The authorization functional unit is preferably realized by software. This software can, for. B. implemented in an embedded system.

The access control point is checked using the authorization function unit 3 , whether an attempt to access the actors 1a . 1b and / or sensors 2a . 2 B is entitled or not. The result of this review decides whether then access to the actors 1a . 1b and / or sensors 2a . 2 B is authorized or not. This may be the access control point 3 have an electronic access control list, in which all already to access the actuators 1a . 1b and / or sensors 2a . 2 B Authorized persons and their access rights are registered. In addition, the access control list may contain predefined access profiles.

In the embodiment shown in the drawing is the access control point 3 integrated in a device that also receives and evaluates data from the sensors 2a . 2 B and for controlling the actuators 1a . 1b serves. In principle, access control point, reception and evaluation of sensor data and control of actuators can also be implemented on separate devices. In this case, the separate devices are connected for communication.

The access control point 3 can, as shown in the drawing, with an access point 9 be connected to communication. The connection between access control point 3 and access point 9 is preferably produced wirelessly. The access point 9 serves as an interface between the access control point 3 and another access control point and / or networks, such. As a local network, a wide-area network or the Internet. By means of the access point 9 Thus, for example, from a computer on the Internet or a smartphone in a mobile network, a connection to the access control point 3 getting produced.

The access point 9 preferably supports multiple network protocols and services, such as: Dynamic Host Configuration Protocol (DHCP), Domain Name System (DNS), and Dynamic Domain Name System (DynDNS), such as: B. a comfortable connection to the access control point 3 to allow for changing network addresses. Instead of being integrated into a separate device, the access control point may be 3 also together with the access point 9 be realized in a device.

The access point 9 For example, a modem or router may be for a Digital Subscriber Line (DSL) as offered by many ISPs.

Furthermore, the drawing shows schematically two smartphones 4 . 6 , each containing a semi-permanent data store 5 . 7 exhibit. As an alternative to smartphones, other electronic communication means, such as normal mobile phones, computers, notebooks, netbooks, tablet computers or the like, can be used.

Both smartphones 4 . 6 are wirelessly integrated into a mobile network. This is with the help of the base station 10 indicated. It is also possible that both smartphones 4 . 6 additionally via a local network, eg. B. based on the Bluetooth technology, can communicate directly with each other. About the mobile network and other networks, such. B. via a network based on Digital Subscriber Line (DSL) technology, the smart phones 4 . 6 with the access point 9 communicate.

Now would like one already to access the actuators 1a . 1b and / or sensors 2a . 2 B Authorized, for. B. the owner of the actuators 1a . 1b and / or sensors 2a . 2 B , a third party access to the actors 1a . 1b and / or sensors 2a . 2 B grant a credential in electronic form. A credential can e.g. Example, a personal identification number (PIN), a password, a transaction number (TAN) or a quick-response (QR) code.

In addition to the credentials, information about access rights, such as a permitted number, a permitted period of time and a permitted amount of access to the actuators 1a . 1b and / or sensors 2a . 2 B , created. For example, the access rights can specify that the third party only has one-time access to a limited function of the actuators 1a . 1b is allowed at a certain time of day of a certain day. In this case, the third party would be denied a second access or access at any other time.

The access rights information may also include information about a permitted position range within which the third party accesses the actuators 1a . 1b and / or sensors 2a . 2 B It is also possible that the credential itself contains the information about the access rights. Thus, the access rights could be coded together with the credential in a transaction number.

The credentials together with the information about the access rights can, for example, with or from an application program of the smartphone 4 of the beneficiary. Before creating the credential, including the information about the access rights, the application program can query the access rights that should be granted to the third party. However, the application program can also select predefined access profiles with default values.

Once created, the credential, along with access rights information, is stored on a datastore 5 of the smartphone 4 saved by the beneficiary.

Subsequently, the credentials including the information about the access rights in electronic form to the smartphone 6 of the third party. The transmission can take place, inter alia, via a wide area network, in particular via a cellular radio network, for example via a mobile radio network based on GSM or UMTS technology. For transmission, an electronic short message (SMS), e-mail o. The like. Can also be used.

Upon receipt, the credential, along with the information about the access rights, is stored on a semi-permanent data store 7 of the smartphone 6 stored by the third party. Preferably, the smartphone transmits 6 the third party a confirmation of the correct receipt of the credential to the smartphone 4 the claimant. It can be provided that the credential becomes invalid and no longer to access the actuators 1a . 1b and / or sensors 2a . 2 B authorized, the confirmation should not be within a certain time interval from the smartphone 4 of the claimant.

Once created, the credentials, along with information about the access rights, can be added to the access control point by the owner 3 be transmitted, for example via the Internet or a local area network. In this case, the access control point 3 Update the access control list based on the submitted data. In this case, an entry in the access control list can be created individually for the third party. The transmission of the credential including the information about the access rights by the authorized person to the access control point 3 can z. B. fail if the third party a credential including information about the access rights based on an existing entry in the access control list of the access control point 3 is transmitted.

Now takes the third party an attempt to access the actors 1a . 1b and / or sensors 2a . 2 B before, the third party preferably first at the access control point 3 authenticate with proof of identity. This should be a way to prevent that instead of the third party, an unauthorized person with the proof of third party access to the actors 1a . 1b and / or sensors 2a . 2 B receives. As a proof of identity can be, for example, a password transmitted by the authorized person at an earlier time.

Alternatively or in combination can be used as a proof of identity, a unique, the third party and unauthorized typically unknown identifier. Possible identifiers are z. B. a serial number of the smartphone 6 third party, such as the International Mobile Station Equipment Identity (IMEI), a hardware address of a network adapter of the smartphone 6 of the third party, such as the MAC address, and a subscriber identifier of the third party, such as the International Mobile Subscriber Identity (IMSI). After submitting the credential to the third party, the application program of the smartphone 6 of the third party combining the identifier with the credentials such that when checked by the authorization function of the access control point 3 Also, the resulting combination is verified, provided that the access attempt to the actuators 1a . 1b and / or sensors 2a . 2 B in method step d) additionally the same identifier to the access control point 3 is transmitted.

Compared to a password, which can be passed on to unauthorized persons in a simple manner or can be detected unauthorized by unauthorized persons, the identifier unknown to the third party and unauthorized person, as proof of identity, makes it difficult for an unauthorized person to access the actuators 1a . 1b and / or sensors 2a . 2 B considerably, especially if the identifier is transmitted to the access control point 3 difficult to manipulate.

If the authenticating third party does not pass through the access control point 3 be authenticated, the third party will have access to the actors 1a . 1b and sensors 2a . 2 B denied. A check z. B. a credential is then not even performed.

Should the authenticating third party through the access control point 3 authenticated, the credential, along with the information about the access rights, is retrieved from the data store 7 of the smartphone 6 of the third party and to the access control point 3 transmitted. The transmission takes place preferably wirelessly, z. B. by means of Bluetooth technology or by means of near field communication.

It is also possible that with the help of the smartphone 6 the third party's credentials the access control point 3 transmitted visually or in a language.

Upon receipt of the credentials of the third party, including the information about the access rights to the data store 8th the access control point 3 saved. After or during storage, the authorization function unit of the access control point 3 verified the credentials.

If verified by the verification of the credentials, the authorization function unit of the access control point 3 the information about the access rights is analyzed and the third party is responsible for accessing the actors 1a . 1b and / or sensors 2a . 2 B authorized under the access rights.

Are contained in the information about the access rights information about a permitted position range within which the third party to access the actuators 1a . 1b and / or sensors 2a . 2 B is authorized, in addition the position of the third party is determined and by the authorization function unit of the access control point 3 the information about the allowed position range is analyzed taking into account the position determined.

The position of the third party to authorize can be determined by the access control point 3 or the Smartphone 6 of the third z. B. by means of localization techniques such as multilateration, triangulation, trilateration or Cell of Origin. But it is also possible that the smartphone 6 of the third party using the Global Positioning System (GPS) determines its own position and the access control point 3 transmitted. Alternatively, the smartphone 6 the third also a localization identifier, such. As a service set identifier (SSID) of a WLAN, and use the access control point 3 to transfer.

If the determined position of the third party is not within the permitted position range contained in the information about the access rights, the third party will not be able to access the actuators 1a . 1b and / or sensors 2a . 2 B authorized.

It is thus possible to generate a combination of credentials, credentials, and locality credentials as a token and to use it for access control. It can be provided that the token is usable only in a predetermined time interval. In this way, a high degree of security in access control can be achieved.

If the proof of verification is not verified by the verification, the third party will have access to the actors 1a . 1b and / or sensors 2a . 2 B through the access control point 3 denied.

Upon successful authorization of the third party z. B. a control command for the actuator 1a to the access control point 3 to transfer. The control command is then taken from the access control point 3 to the controller of the actuator 1a forwarded. The control of the actuator 1a then causes the execution of the control command by the actuator 1a , Preferably, the controller transmits the actuator 1a to the access control point 3 a feedback on the execution of the control command and / or on the resulting effect of the control command. The access control point 3 can then send the feedback to the smartphone 6 of the third party. Preferably, the feedback is also sent to the smartphone 4 submitted by the claimant.

LIST OF REFERENCE NUMBERS

1

actuator

1a

Motor for roller shutters

1b

Heating actuator

2

sensor

2a

brightness sensor

2 B

thermocouple

3

access Control

4

Medium (of the claimant)

5

Data store (of the authorized person)

6

Medium (of the third party)

7

Data storage (of the third party)

8th

Datastore (the access control point)

9

access point

10

base station

QUOTES INCLUDE IN THE DESCRIPTION

This list of the documents listed by the applicant has been generated automatically and is included solely for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Cited patent literature

• US 2005/0055582 A1 [0009]
• EP 1217475 A2 [0010]

Cited non-patent literature

• "Sensors and actuators - control systems instrumentation" by Clarence W. De Silva, published by CRC Press on January 24, 2007 (ISBN 978-1-420-04483-6) [0005]

Claims (10)

Method for controlling access to an actuator ( 1 ) and / or sensor ( 2 ), wherein the actuator ( 1 ) and / or sensor ( 2 ) with an access control point ( 3 ), the access control point (s) 3 ) an authorization functional unit for authorizing access attempts to the actuator ( 1 ) and / or sensor ( 2 ) and wherein the method comprises the following method steps: a) First of all, one is already used to access the actuator ( 1 ) and / or sensor ( 2 ) Authorized persons for a third party to be authorized in electronic form a proof of entitlement as well as information about access rights, such as a permitted number, a permitted period of time and a permitted scope of access to the actor ( 1 ) and / or sensor ( 2 ), created. b) Subsequently, the credentials together with the information about the access rights on a medium ( 4 ) of the claimant with a data storage ( 5 ) saved. c) Subsequently, the credentials including the information about the access rights in electronic form to a medium ( 6 ) of the third party with a data memory ( 7 ) and upon receipt on the data memory ( 7 ) of the medium ( 6 ) of the third party. d) In the event of a later attempt by the third party to access the actor ( 1 ) and / or sensor ( 2 ), the credentials and the access rights information from the data store ( 7 ) of the medium ( 6 ) of the third party, to the access control point ( 3 ) and upon receipt on a data memory ( 8th ) of the access control point ( 3 ) saved. e) After or during the storage of the credential, together with the information about the access rights, the authorization function unit of the access control point ( 3 ) checks the credentials. f) If the verification verifies the credential, the authorization functional unit of the access control point ( 3 ) the information about the access rights is analyzed and the third party is asked for access to the actor ( 1 ) and / or sensor ( 2 ) authorized under the access rights. g) If verification does not verify the credential, the third party will have access to the actor ( 1 ) and / or sensor ( 2 ) through the access control point ( 3 ) denied. A method according to claim 1, characterized in that the method is adapted for that the creation of the credential and / or the authorization function unit is realized by software / is. A method according to claim 1 or 2, characterized in that the method is adapted for that the actuator ( 1 ) and / or sensor ( 2 ) with the access control point ( 3 ) is connected by means of a local network. Method according to one of the preceding claims, characterized in that in step a) a credential is created, which itself contains the information about the access rights. Method according to one of the preceding claims, characterized in that after method step a) but before method step d) the credentials together with the information about the access rights by the authorized person additionally to the access control point ( 3 ), preferably over a local area network. Method according to one of the preceding claims, characterized in that in method step b) the proof of authorization on an electronic communication means ( 4 ) of the claimant with a data storage ( 5 ), such as a smartphone or a computer, preferably on an electronic communication medium ( 4 ) with a semi-permanent electronic data storage ( 5 ), and / or that in method step c) the obtained credential on an electronic communication means ( 6 ) of the third party with a data memory ( 7 ), such as a smartphone or a computer, preferably on an electronic communication medium ( 6 ) with a semi-permanent electronic data storage ( 7 ) is stored. Method according to one of the preceding claims, characterized in that in method step c) the credentials together with the information about the access rights to the medium ( 6 ) of the third party with the data memory ( 7 ) via a wide area network, in particular via a cellular radio network, z. B. in the form of an electronic short message or e-mail is transmitted. Method according to one of the preceding claims, characterized in that before or in method step d) the third party at the access control point ( 3 ) is authenticated on the basis of a proof of identity, in particular on the basis of a password transmitted by the person entitled at an earlier time or on the basis of a unique identifier of the medium ( 6 ) of the third party, wherein the method steps subsequent to method step d) are executed only if the identity of the third party by the access control point ( 3 ) was authenticated. Method according to one of the preceding claims, characterized in that in method step d) the credentials together with the information about the access rights to the access control point ( 3 ) by means of a wireless technology, z. B. by means of Bluetooth technology or by means of near field communication. Method according to one of the preceding claims, characterized in that the information about the access rights contain information about an allowed position range, within which the third party for accessing the actuator ( 1 ) and / or sensor ( 2 ), and that in step f) additionally the position of the third party, z. With the help of the Global Positioning System and by the authorization function unit of the access control point ( 3 ) the information about the allowed position range is analyzed taking into account the determined position.

Images