Method and system for securely controlling a remote measurement device

Patent metadata

Field	Value
Publication number	US-11991147-B2
Application number	US-202217707543-A
Country	US
Kind code	B2
Filing date	Mar 29, 2022
Priority date	Mar 29, 2022
Publication date	May 21, 2024
Grant date	May 21, 2024

Abstract

A method and a system for securely controlling a remote measurement device. A connection between at least one remote measurement device and a server, such as a server computer, connected to the Internet is established. By a firewall, the at least one remote measurement device is protected from unauthorized access via the Internet. In case of an event of the at least one remote measurement device, an event notification is sent from the at least one remote measurement device to the server via the firewall. A temporary access token is generated by the server in response to the event notification received from the remote measurement device. Access is temporarily granted to the at least one remote measurement device based on the temporary access token.

First claim

The embodiments of the invention in which an exclusive property or privilege is claimed are defined as follows:

1. A method for securely controlling a remote measurement device, the method comprising the steps of:
establishing a connection between at least one remote measurement device and a server connected to the Internet, wherein the connection established between the at least one remote measurement device and the server is a tunnel connection which is established without a gateway;
protecting, by a firewall, the at least one remote measurement device from unauthorized access via the Internet;
sending, in case of an event of the at least one remote measurement device, an event notification from the at least one remote measurement device to the server via the firewall;
generating a temporary access token by the server in response to the event notification received from the remote measurement device; and
temporarily granting access to the at least one remote measurement device based on the temporary access token,
wherein the event represents an error state of the at least one remote measurement device or an end of a measurement procedure performed by the at least one remote measurement device.

2. The method of claim 1 , wherein the access is temporarily granted if the temporary access token is presented at a configuration device connected with the server.

3. The method of claim 1 , wherein the temporary access token is transmitted by the server to a web-enabled end device connected to the server by a user notification.

4. The method of claim 3 , wherein the event notification is outputted at a human-machine interface of the at least one remote measurement device and/or the user notification is outputted at the web-enabled end device.

5. The method of claim 3 , wherein the user notification comprises a web address, and wherein access to the web address is login and password restricted.

6. The method of claim 1 , wherein the temporary access token is generated based on a human-machine-interaction with the at least one remote measurement device.

7. The method of claim 1 , wherein external access to the at least one remote measurement device is preventable based on at least one switch associated with the at least one remote measurement.

8. The method of claim 1 , wherein the access is only granted for a predefined time period and blocked automatically after expiration of the predefined time period.

9. A system for securely controlling a remote measurement device, comprising: at least a server connected to the Internet, at least one remote measurement device, and at least one firewall,
wherein the at least one remote measurement device is at least configured to send data to the server via a connection established between the at least one remote measurement device and the server,
wherein the connection established between the at least one remote measurement device and the server is a tunnel connection which is established without a gateway,
wherein the at least one firewall is associated with the connection established between the at least one remote measurement device and the server,
wherein the at least one firewall is configured to protect the at least one remote measurement device from unauthorized access via the Internet,
wherein, in case of an event of the at least one remote measurement device, an event notification is sent from the at least one remote measurement device to the server via the firewall, and
wherein the system is configured to at least temporarily grant access to the at least one remote measurement device based on a temporary access token provided by the server in response to the event notification,
wherein the event represents an error state of the at least one remote measurement device or an end of a measurement procedure performed by the at least one remote measurement device.

10. The system of claim 9 , wherein the system is configured to at least temporarily grant access to the at least one remote measurement device based on the temporary access token if the temporary access token is presented at a configuration device connected to the server.

11. The system of claim 9 , wherein the system comprises a web-enabled end device configured to receive the temporary access token generated by the server.

12. The system of claim 9 , wherein the temporary access token is provided via a user notification.

13. The system of claim 12 , wherein the event notification is outputted at a human-machine interface of the at least one remote measurement device and/or the user notification is outputted a web-enabled end device.

14. The system of claim 12 , wherein the user notification comprises a web address, and wherein access to the web address is login and password restricted.

15. The system of claim 9 , wherein the temporary access token is creatable by a human-machine-interaction with the at least one remote measurement device.

16. The system of claim 15 , wherein the human-machine-interaction comprises one of a hardware-based interaction with the at least one remote measurement device or a software-based interaction with a graphical user interface associated to the at least one remote measurement device.

17. The system of claim 9 , wherein the temporary access token generated is configured to grant access to the at least one remote measurement device for a predefined time period.

18. The system of claim 9 , wherein the at least one remote measurement device is a stationary machine.

19. The system of claim 9 , wherein the at least one remote measurement device comprises at least one switch configured to prevent external access.

20. The system of claim 9 , wherein the temporary access token generated is configured to grant access to the at least one remote measurement device according to a predetermined setting and/or to become invalid if the at least one remote measurement device outputs an event notification indicating normal operation of the at least one remote measurement device.

21. A method for securely controlling a remote measurement device, the method comprising the steps of:
establishing a connection between at least one remote measurement device and a server connected to the Internet, wherein the connection established between the at least one remote measurement device and the server is a tunnel connection which is established without a gateway;
protecting, by a firewall, the at least one remote measurement device from unauthorized access via the Internet;
sending, in case of an event of the at least one remote measurement device, an event notification from the at least one remote measurement device to the server via the firewall, wherein the event represents a specific state of the at least one remote measurement device which requires a remote input, wherein the event notification represents a message sent from the at least one measurement device to the server via the firewall;
generating a temporary access token by the server in response to the event notification received from the remote measurement device; and
temporarily granting access to the at least one remote measurement device based on the temporary access token, wherein the access is not granted via the already established communication connection, but an additional connection which is established in case the temporary access token is used.

Assignees

• Rohde & Schwarz

Inventors

• Schmid Bjoern

Classifications

• H04L63/0209 Primary

  Architectural arrangements, e.g. perimeter networks or demilitarized zones · CPC title

• H04L63/108

  when the policy decisions are valid for a limited amount of time · CPC title