Safe guard detection for unexpected operations in a MES system

A method for a safe guard detection of unexpected operations launched by an operator for a manufacturing execution system (MES-System), where the MES-System includes:

• a first database including:
• a set of operations;
• a set of operators;
• calendar information for a shift;
• calendar information for equipment of the MES-System;
• a second database including a login history of carried out logins of the operator;
• a machine learning model;
• which method comprises the steps of:
• cataloging the operator in a given role in the MES-System;
• feeding, in a learning phase, a learning module being part of a machine learning model with launched operations for that role;
• checking, in a run time phase, the launched operations as to whether the launched operations comply with the operations in the learning module;
• storing a launched operation together with data identifying the operator and operator login data as an entry in an event trace file in case of non-compliance of the launched operation;
• analyzing entries in the event trace repository by an intrusion detection system and based on an analysis generating alerts;
• and
• wherein the step of checking the launched operations includes at least one step selected from the group consisting of:
• 1) crosschecking of logins for detecting, whether the operator logs-in himself at different places at a same time where such simultaneous logins may not be expected,
• 2) determining whether an operation complies with an order scheduling being defined by the calendar information in the first database, and
• 3) performing a comparison of a login time of the operator with the calendar information for a shift stored in the first database.