Access Protection Accessory for an Automation Network

An automation system comprising:

• at least one automation installation configured to perform an automation process,
• at least one automation network connected to the automation installation via an access protection accessory comprising a digital storage medium configured to store at least first rules and second rules, network ports, and a processor configured to read the at least first rules and second rules, process the rules and receive and forward data through the network ports,
• wherein the first rules, in a first state of the automation process, define which received data are forwarded and which received data are not forwarded,
• wherein the processor is further configured to receive, through one network port of the network ports from the automation installation, at least one signal indicating a change in a state of the automation process and detect the change in a state of the automation process by evaluating the signal;
• and
• wherein following reception of the at least one signal the second rules define which received data are forwarded and which received data are not forwarded.

A method for operating an access protection accessory in an automation network connected to an automation installation configured to perform an automation process, the method comprising:

• performing the automation process in a first state;
• reading, first rules from a storage medium in the access protection accessory by a processor in the access protection accessory;
• forwarding data by applying the first rules, the first rules defining which data are forwarded and which data are not forwarded;
• receiving at least one signal indicating a change in a state of the automation process;
• detecting the change in state by evaluating the signal;
• reading second rules from the storage medium;
• and
• forwarding, after the detecting the change in state, the data by applying the second rules, the second rules defining which received data are forwarded and which received data are not forwarded.

A non-transitory digital storage medium for an access protection accessory in an automation network connected to an automation installation configured to perform an automation process, the digital storage medium comprising program instructions which, upon execution by a processor, prompt the access protection accessory to:

• perform the automation process in a first state and read first rules using the processor in the access protection accessory;
• forward data by applying the first rules, the first rules defining which data are forwarded and which data are not forwarded;
• receive at least one signal indicating a change in the state of the automation process;
• read second rules from the database;
• and
• forward data by applying the second rules after the at least one signal is received, the second rules defining which received data are forwarded and which received data are not forwarded.