Method and device providing secure vendor service access
AssigneeABB Schweiz AG
InventorsMatus Harvan, Roman Schlegel, Sebastian Obermeier, Thomas Locher
Life of this patent
Estimating the term…
Abstract
The present invention provides an approach for granting access and respectively denying access to an instruction set of a device. The technical teaching provides the advantage that unauthorized access can be effectively prevented. Hence, maintenance work can be performed by specialized staff and security sensitive parts of the instruction sets are secured.
Claims9
A method for operating a device providing secure vendor service access for its maintenance, comprising:
- providing a configuration storage providing a device configuration for operating the device;
- and
- providing a security module being arranged to assign at least one access right for accessing the configuration storage;
- wherein the device is only operable if the at least one access right is set;
- wherein the device is arranged such that a transition from (1) a condition of access rights not being set, to (2) a condition of access enabled or access disabled, and vice versa, is shiftable;
- and
- wherein the device is arranged such that a direct transition from (1) the condition of access rights enabled, to (2) access rights disabled, and vice versa, is prohibited, and
- wherein providing secure vendor service access for the maintenance of the device includes providing service functionality for the maintenance of the device.
A method for operating a device providing secure vendor service access for its maintenance, comprising:
- providing a configuration storage providing a device configuration for operating the device;
- and
- providing a security module being arranged to assign at least one access right for accessing the configuration storage;
- wherein the device is only operable if the at least one access right is set;
- wherein the device is arranged such that a transition from (1) a condition of access rights not being set, to (2) a condition of access enabled or access disabled, and vice versa, is shiftable;
- and
- wherein the device is arranged such that a direct transition from (1) the condition of access rights enabled, to (2) access rights disabled, and vice versa, is prohibited, and
- wherein a transition from a first state to a second state and a subsequent transition from the second state to the first state results in the device being in an equivalent state to the first state before the transition, wherein
- the first state and the second state include the condition of access rights not being set or the condition of access enabled or access disabled, and wherein
- the first state comprises a different condition to the second state.
A method for operating a device providing secure vendor service access for its maintenance, comprising:
- providing a configuration storage providing a device configuration for operating the device;
- and
- providing a security module being arranged to assign at least one access right for accessing the configuration storage;
- wherein the device is only operable if the at least one access right is set;
- wherein the device is arranged such that a transition from (1) a condition of access rights not being set, to (2) a condition of access enabled or access disabled, and vice versa, is shiftable;
- and
- wherein the device is arranged such that a direct transition from (1) the condition of access rights enabled, to (2) access rights disabled, and vice versa, is prohibited, and
- wherein the device is further arranged such that a transition from the condition of access disabled to a condition of access temporarily enabled is shiftable.
Dependencies are inferred from the claim text.