# US 11,868,452 B2 · Method for automatically registering a user on a field device, and automation system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,868,452 B2 - Document ID: US11868452B2 - Status: Granted - Kind: B2 - Application number: 17/023,480 - Filed: 2020-09-17 - Published: 2021-04-01 - Granted: 2024-01-09 - Earliest claimed: 2019-09-27 - Assignees: Siemens Schweiz AG - Applicants: Siemens Schweiz AG - Inventors: Dirk Kröselberg; Carl Henrik Denis; Silvio Riener - Web page: https://patentgrep.com/patent/US11868452B2 ## CPC - G05B 19/042: using digital processors (G05B19/05 takes precedence) - G06F 21/31: User authentication - G06F 21/602: {Providing cryptographic facilities or services} - H04L 67/12: specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks - H04W 12/06: Authentication - G05B 2219/24158: Access only for service, hide, forbidden tamperfree keys, program - G05B 2219/24167: Encryption, password, user access privileges - G05B 2219/25428: Field device - G05B: CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS (systems for controlling or regulating non-electric variables G05D; systems for regulating electric or magnetic variables G05F; control devices or systems insofar as characterised by mechanical features only G05G) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Provided is a method for automatically registering a user on a field device for the purpose of administering the field device, including a) providing user information on the basis of an identity of the user and an identity of the field device by a security device; b) transmitting the provided user information to a mobile device of the user; c) generating field-device-specific registration information on the basis of the transmitted user information by the mobile device; and d) registering the user on the field device by the generated registration information. This method has the particular advantage that a highly secure infrastructure can be used for administering access information for administering the field devices without problems arising during the registration process. ## Claims ### Claim 1 A method for automatically registering a user on a field device for the purpose of administering the field device, comprising: providing the field device, wherein the field device does not have access allowing administering of the field device over the internet, providing user information on the basis of an identity of the user and an identity of the field device by a security device wherein the security device is configured for cryptographically storing user information for multiple field devices and wherein the security device is not connected to the internet, transmitting the provided user information to a mobile device of the user by the security device using a local communication connection, generating field-device-specific registration information on the basis of the transmitted user information by the mobile device, and registering the user on the field device by the generated registration information. ### Claim 2 (depends on 1) The method as claimed in claim 1, wherein the security device is arranged locally to the field device. ### Claim 3 (depends on 1) The method as claimed in claim 1, wherein the security device is configured for cryptographically secure storage of access data for at least one user group from a plurality of user groups of the field device. ### Claim 4 (depends on 1) The method as claimed in claim 1, wherein there is provision for a receiving apparatus, couplable to the field device, that registers on the field device as an interface device and that uses a communication connection to the mobile device to receive the registration information from the mobile device and registers the user on the field device. ### Claim 5 (depends on 4) The method as claimed in claim 4, wherein the mobile device sends an administration input for administering the field device to the receiving apparatus in addition to the registration information and after the user has been registered on the field device. ### Claim 6 (depends on 1) The method as claimed in claim 1, wherein the mobile device generates the registration information by a cryptographic method on the basis of the user information. ### Claim 7 (depends on 1) The method as claimed in claim 1, wherein step a) comprises authentication of the user on at least one of the mobile device and/ the security device. ### Claim 8 An automation system having a number of field devices and at least one security device, wherein the at least one security device is configured for cryptographically storing user information for the number of field devices and wherein the security device is not connected to the internet, wherein each field device from the number of field devices is administrable by at least one user, wherein administering a respective instance of the field devices requires registration with the respective field device by field-device-specific registration information and administering is not permitted over the internet, wherein a mobile device of the at least one user is configured for retrieving user information from the at least one security device on the basis of an identity of the at least one user and an identity of the respective field device, wherein the user information is retrieved using a local communication connection, and wherein the mobile device is configured for generating the field-device-specific registration information on the basis of the retrieved user information and for outputting the generated registration information. ### Claim 9 (depends on 8) The automation system as claimed in claim 8, wherein the number of field devices forms a local group, wherein the security device is arranged locally to the group. ### Claim 10 (depends on 8) The automation system as claimed in claim 8, wherein at least one of the field devices from the number of field devices has a coupled receiving apparatus that registers on the field device as an interface device, wherein the mobile device is configured for making a communication connection to the receiving apparatus, wherein the mobile device is configured for transmitting the registration information to the receiving apparatus via the communication connection and the receiving apparatus is configured for registering the at least one user on the field device. ### Claim 11 (depends on 10) The automation system as claimed in claim 10, wherein the mobile device is configured for generating an administration input for administering the field device and for transmitting the administration input to the receiving apparatus after the at least one user has been registered on the field device. ### Claim 12 (depends on 8) The automation system as claimed in claim 8, wherein the mobile device is configured for at least one of retrieving the user information and generating the registration information by a cryptographic method. ### Claim 13 (depends on 8) The automation system as claimed in claim 8, wherein the communication connection for transmitting the registration information is a local communication connection. ### Claim 14 (depends on 1) The method as claimed in claim 1, wherein the mobile device leaves the transmitted user information unchanged in terms of content and puts the transmitted user information into a data format readable by the field device and/or packs the transmitted user information into a data packet transmittable in accordance with a specific protocol. ### Claim 15 (depends on 8) The automation system as claimed in claim 8, wherein the mobile device is also configured to leave the retrieved user information unchanged in terms of content and put the retrieved user information into a data format readable by the field device and/or to pack the retrieved user information into a data packet that can be transmitted in accordance with a specific protocol. ### Claim 16 A method for automatically registering a user on a field device for the purpose of administering the field device, comprising: providing the field device, wherein the field device has obsolete control software and/or does not have access allowing administering of the field device from the internet, providing a receiving apparatus and coupling the receiving apparatus to the field device as an interface device, providing user information on the basis of an identity of the user and an identity of the field device by a security device, wherein the security device is configured for cryptographically storing user information for multiple field devices and wherein the security device is not connected to the internet, transmitting the provided user information to a mobile device of the user by the security device, generating field-device-specific registration information on the basis of the transmitted user information by the mobile device, transmitting the field-device-specific registration information to the receiving apparatus by the mobile device using a communication connection, outputting the field-device-specific registration information to the field device, and registering the user on the field device. ### Claim 17 (depends on 16) The method as claimed in claim 16, wherein the communication connection is a near field communication connection. ### Claim 18 (depends on 16) The method as claimed in claim 16, wherein the receiving apparatus comprises a USB dongle.