Authentication control of an industrial asset

An augmented reality (AR) system, the AR system comprising:

• a memory configured to store a plurality of programmable instructions;
• and
• a processing device in communication with the memory, wherein the processing device, upon execution of the plurality of programmable instructions is caused to:
• cause display of an interactive augmented reality (AR) display of the physical asset responsive to local user input data from a local user;
• provide an interface via the AR display for an operator to interact with displayed interactive graphical elements (IGEs) that correspond to the respective actual components of the physical asset, wherein the interface is configured for the operator to control a selected actual component of the actual components using a corresponding IGE, the operator being the local user or a different user;
• determine, responsive to detected user interaction with the corresponding IGE, whether the selected controllable actual component is designated as sensitive;
• responsive to a determination that the selected controllable actual component is designated as sensitive, require enhanced multifactor authentication (MFA), the enhanced MFA establishing that the local user is local to the asset using a first factor of the enhanced MFA and establishing that the local user is authenticated using a second factor of the enhanced MFA;
• and
• allow control of the sensitive actual component based on receipt of proof of authentication of the local user by the enhanced multifactor authentication.

A non-transitory computer readable storage medium and one or more computer programs embedded therein, the computer programs comprising instructions, which when executed by a computer system, cause the computer system to:

• cause display of an interactive augmented reality (AR) display of the physical asset responsive to local user input data from a local user;
• provide an interface via the AR display for an operator to interact with displayed interactive graphical elements (IGEs) that correspond to the respective actual components of the physical asset, wherein the interface is configured for the operator to control a selected actual component of the actual components using a corresponding IGE, the operator being the local user or a different user;
• determine, responsive to detected user interaction with the corresponding IGE, whether the selected controllable actual component is designated as sensitive;
• responsive to a determination that the selected controllable actual component is designated as sensitive, require enhanced multifactor authentication (MFA), the enhanced MFA establishing that the local user is local to the asset using a first factor of the enhanced MFA and establishing that the local user is authenticated using a second factor of the enhanced MFA;
• and
• allow control of the sensitive actual component based on receipt of proof of authentication of the local user by the enhanced multifactor authentication.