JPWO2019175512A5 - - Google Patents

Claims (12)

A housing (30) for managing access to an industrial network (10) to which industrial equipment (U1, U2, U3) is connected, wherein the management housing (30) is a housing (30).
-A channel (30a) for accessing an internet type data network, wherein the channel (30a) for accessing the data network comprises a cutoff unit (33), the channel (30a).
-A channel (30b) for controlling a channel (30a) for accessing a data network, wherein the control channel (30a) enables communication between an industrial network and a data network. A channel comprising a controller (31) configured to control the cutoff unit (33), wherein the cutoff unit comprises a cutoff relay that can be activated by a control signal transmitted in the controller (31). (30b)
The housing is equipped with. The housing according to claim 1, wherein the control channel (30b) comprises a first communication interface (32) configured to place the housing in communication with a GSM type mobile network. The housing according to claim 2, wherein the first communication interface (32) is a GSM communication interface, and the control signal depends on the received SMS. The controller (31) is configured to authenticate the user, and once the user is authenticated, the cutoff unit (33) is used to establish communication between the industrial network (10) and the data network. The housing according to any one of claims 1 to 3, which is configured to be controlled. Remote maintenance configured to connect to an industrial network (10) to which a set of industrial equipment is connected on the one hand and to the housing (30) according to any one of claims 1 to 4 on the other hand. The server (20) includes a control server (21) configured to communicate with the housing (30) and is configured to manage access to the industrial network (10) from the housing (30). A remote maintenance server that also has a firewall (22). 5. The firewall (22) is configured to isolate a particular industrial device from other devices on the network in order to allow only access to the isolated device without being able to access others. The remote maintenance server described in. The method for remote maintenance of a set of industrial equipment connected together with the industrial network (10), wherein the industrial network (10) is described in any one of claims 1 to 4. Connected to the housing (30) for managing access to the industrial network, the management housing is connected to the data network (40) and mobile network (70) , the method is the following steps, anomalies are of interest. Detected in a set of units, called a unit with
-A step (E1) of receiving a request on the control channel (30b) of the housing to establish a remote maintenance communication between the industrial network (10) and the data network (40).
-Step to authenticate the request (E2) and, if the request is authenticated,
-A method comprising establishing a remote maintenance communication between an industrial network and a data network (E3). The method of claim 7, wherein the mobile network is a GSM network and the request preferably comprises an SMS comprising a secret code that allows authentication of the request. The housing (30) is connected to the remote maintenance server (20) and the method is of interest so that in the establishment of remote maintenance communication (E3), only the equipment of interest is connected to the industrial network (10). The method of claim 7 or 8, comprising separating the device from the other device of the industrial network (10). In order to perform a maintenance operation on the device of interest (E5), the management housing (30) provides the intervener's terminal so that the intervener can access the device of interest via the data network (40). The step (E4) of connecting to the industrial network (10) and the step (E6) of disconnecting the operator's terminal from the industrial network by the management housing when the maintenance operation is completed, the industrial network is The method of any one of claims 7-9, comprising: steps, which are no longer accessible via the internet network (40). The method of claim 10, wherein the step of connecting the intervener's terminal comprises authenticating the intervener to verify that he is authorized to connect to the industrial network (10). A claim comprising the step (E8) of restoring the industrial network (10) so that all industrial equipment is accessible via the industrial network (10) but not accessible from the internet network (40). The method according to any one of 7 to 11.