WO2022219434A1

WO2022219434A1 - Method and system for providing wireless connection between field devices with computing device

Info

Publication number: WO2022219434A1
Application number: PCT/IB2022/052541
Authority: WO
Inventors: Mini TT; Swapnil Talele R
Original assignee: Abb Schweiz Ag
Priority date: 2021-04-14
Filing date: 2022-03-21
Publication date: 2022-10-20

Abstract

The present disclosure provides a method and a computing device (101) for providing wireless connection between field device (301) of industrial plant with computing device (101) for controlling access to field device (301). The method includes receiving login credentials of user for application (105, 203) of computing device (101) for accessing and controlling field device (301). On successful, a Bluetooth pairing credential for field device (301) is determined using login credentials and field device information. The field device information comprises unique identifier number and a device serial number of field device (301). Further, a request is transmitted to the Bluetooth interface of the field device for Bluetooth pairing along with the determined Bluetooth pairing credentials. In response, a Bluetooth pairing confirmation is received from the field device (301) based on a validation for controlling and accessing the field device (301).

Description

METHOD AND SYSTEM FOR PROVIDING WIRELESS CONNECTION BETWEEN FIELD DEVICES WITH COMPUTING DEVICE

FIELD OF THE INVENTION

[001] The present invention relates in general to a communication interface, and more particularly relates to providing a wireless connection between a field device of an industrial plant with a computing device for controlling an access to the field device.

BACKGROUND

[002] In recent years, Bluetooth® technology has been increasingly utilized in industrial applications to facilitate communication between various devices. Generally, first step to connect Bluetooth device is pairing. Pairing is an exchange of security features which includes Input/output (IO) capabilities, requirements for Man-In-The-Middle protection and the like. The exchange of pairing information between two devices is done through a pairing request and pairing response packet. When the exchange of pairing feature starts, the two devices shall exchange their pairing feature information with each other through pairing request and response. With the information, the two devices can determine the I/O capabilities with each other, which pairing mechanism should be used, and select the pairing method. The Bluetooth devices with IO capabilities are suitable for “Passkey Entry” Method. This method needs pairing PIN to authenticate communicating devices.

[003] Currently, most of the field instruments/devices in an industrial plant support Bluetooth having capabilities of device display and numeric keypad, which makes them very suitable to use “Passkey Entry” method for Bluetooth pairing. Generally, these field instruments are installed in environment, where these instruments are not reachable/operable. To overcome this problem, the field instruments keep a fixed pairing PIN (for example: 123456 or 000000). In such scenario, a user may not have to refer device display for pairing PIN. Instead, the user just remembers the pairing PIN and connects to the field instruments. However, it is not secure practice to keep fixed pairing PIN. Hence many Bluetooth devices provide provision to change the pairing PIN. This creates a problem for connecting device to be aware of the Pairing PIN. Thus, it is required to provide an efficient mechanism for connecting the field devices over Bluetooth such that the pairing PIN is not stored in any device.

[004] The information disclosed in this background of the disclosure section is only for enhancement of understanding of the general background of the invention and should not be taken as an acknowledgement or any form of suggestion that this information forms the prior art already known to a person skilled in the art.

SUMMARY

[005] The present disclosure provides a method and a system for providing a wireless connection between a field device of an industrial plant with a computing device for controlling an access to the field device, in accordance with various embodiments. The field device includes a Bluetooth interface for connecting with the computing device. The computing device includes a Bluetooth interface and an application for accessing and controlling the field device. In order to provide a wireless connection between the field device with the computing device, the method includes receiving login credentials of a user for an application of the computing device for accessing and controlling the field device. On successful authentication of the login credentials, a Bluetooth pairing credential for the field device is determined using the login credentials and field device information. The field device information comprises a unique identifier number and a device serial number of the field device. Further, the method includes transmitting a request to the Bluetooth interface of the field device for Bluetooth pairing along with the determined Bluetooth pairing credentials. In response, the method includes receiving a Bluetooth pairing confirmation from the field device based on a validation for controlling and accessing the field device. The field device performs the validation of the Bluetooth pairing credential based on stored hashed credentials associated with the user account.

[006] In accordance with the embodiment, the field device information is received from an advertisement packet broadcasted by field devices during device discovery.

[007] In accordance with the embodiment, upon providing the Bluetooth pairing confirmation, storing information related to the paired computing device in the field device. [008] In accordance with the embodiment, initiating, in the field device, removal of the stored information related to previously paired computing device, on identifying a change in login credentials of a user associated with a user account in an application of the computing device. Further, reinitiating determination of a Bluetooth pairing credential based on new login credentials of the user and field device information.

[009] In accordance with the embodiment, the hashed credentials associated with the user account is determined using the login and the device serial number of the field device.

[010] An embodiment of the present disclosure discloses a computing device for providing a wireless connection between a field device of an industrial plant with a computing device for controlling an access to the field device. The computing device may comprise a processor and a memory communicatively coupled to the processor, where the memory stores processor executable instructions, which, on execution, may cause the computing device to receive login credentials of a user for an application of the computing device for accessing and controlling the field device. On successful authentication of the login credentials, a Bluetooth pairing credential for the field device is determined using the login credentials and field device information. The field device information comprises a unique identifier number and a device serial number of the field device. Further, the computing device transmits a request to the Bluetooth interface of the field device for Bluetooth pairing along with the determined Bluetooth pairing credentials. In response, the computing device receives a Bluetooth pairing confirmation from the field device based on a validation for controlling and accessing the field device. The field device performs the validation of the Bluetooth pairing credential based on stored hashed credentials associated with the user account.

BRIEF DESCRIPTION OF THE ACCOMPANYING DRAWINGS

[011] Having thus described example embodiments of the present disclosure in general terms, reference will now be made to the accompanying drawings, which are not necessarily drawn to scale, and wherein: [012] FIG. 1 illustrates an exemplary embodiment of providing a wireless connection between a field device of an industrial plant with a computing device in accordance with an embodiment of the disclosure;

[013] FIG.2 illustrates a block diagram of a computing device, in accordance with an embodiment of the disclosure;

[014] FIGS. 3 illustrates an exemplary embodiment of determining Bluetooth pairing credential in accordance with an embodiment of the disclosure;

[015] FIG.4A-4B illustrate exemplary scenarios identifying particular field devices in accordance with an embodiment of the disclosure; and

[016] FIG. 5A-5B illustrate flowchart and sequence diagram respectively of a method for providing a wireless connection between a field device of an industrial plant with a computing device, in accordance with an embodiment of the invention.

DETAILED DISCRIPTION

[017] In the following description, for purposes of explanation, numerous specific details are set forth in order to provide a thorough understanding of the present disclosure. It will be apparent, however, to one skilled in the art that the present disclosure can be practiced without these specific details. In other instances, apparatus and methods are shown in block diagram form only in order to avoid obscuring the present disclosure.

[018] Reference in this specification to “one embodiment” or “an embodiment” means that a particular feature, structure, or characteristic described in connection with the embodiment is included in at least one embodiment of the present disclosure. The appearance of the phrase “in one embodiment” in various places in the specification are not necessarily all referring to the same embodiment, nor are separate or alternative embodiments mutually exclusive of other embodiments. Further, the terms “a” and “an” herein do not denote a limitation of quantity, but rather denote the presence of at least one of the referenced items. Moreover, various features are described which may be exhibited by some embodiments and not by others. Similarly, various requirements are described which may be requirements for some embodiments but not for other embodiments.

[019] Some embodiments of the present disclosure will now be described more fully hereinafter with reference to the accompanying drawings, in which some, but not all, embodiments of the invention are shown. Indeed, various embodiments of the invention may be embodied in many different forms and should not be construed as limited to the embodiments set forth herein; rather, these embodiments are provided so that this disclosure will satisfy applicable legal requirements. Like reference numerals refer to like elements throughout. The use of any term should not be taken to limit the spirit and scope of embodiments of the present invention.

[020] The embodiments are described herein for illustrative purposes and are subject to many variations. It is understood that various omissions and substitutions of equivalents are contemplated as circumstances may suggest or render expedient but are intended to cover the application or implementation without departing from the spirit or the scope of the present disclosure. Further, it is to be understood that the phraseology and terminology employed herein are for the purpose of the description and should not be regarded as limiting. Any heading utilized within this description is for convenience only and has no legal or limiting effect.

[021] A method and a computing device for providing a wireless connection between a field device of an industrial plant with the computing device are provided herein in accordance with example embodiments. Field devices in the industrial plant may include such as, sensors, detector, actuators, and other equipment devices. Typically, all field devices in the industrial plant may include a user accounts to control and access. These user accounts are required to be authenticated for accessing the field devices via an application of the computing device. [022] Generally, in order to connect and initiate communication with the field devices, the user may require performing two or more steps/procedure. For example, consider a mobile application which is used to access a field device over Bluetooth. Considering the field device is associated with two user accounts. In order to access the field device, the user must first pair the field device on the mobile application. Once the user is successfully paired with the field device, the field device is required to be authenticated for further actions. Thus, elongating the overall wireless connection procedure. Therefore, the method and computing device disclosed herein provide a seamless and transparent Bluetooth pairing process without the need of storing Bluetooth pairing PIN in devices and for users to keep track of the Bluetooth pairing PIN.

[023] Referring to FIG. 1, an exemplary environment 100 for providing a wireless connection between a field device with the computing device is shown. As shown, a computing device 101 is wirelessly connected with at least one field devices 103 (such as field device 1031, field device 1032. field device 103N). In an embodiment, the computing device 101 may include, but are not limited to, a laptop, a desktop computer, a notebook, a smartphone, a tablet, and any other computing devices which is capable of implementing Bluetooth communication. The computing device 101 includes an application 105 which is any mobile/PC application for accessing and connecting to the field devices

103.

[024] The application 105 may be associated with different types of user accounts. For instance, a standard user account which is accessible to any user with limited features access and an advanced user account and a service user account which are accessible to limited user and requires password protected authentication. For initiating the wireless connection, the computing device 101 includes a Bluetooth interface 107 which connects with a Bluetooth interface (not shown explicitly in Fig.1) of respective field devices 103. Further, the computing device 101 may include an I/O Interface 109, a memory 111 and a processor 113. The computing device 101 and its components are explained in detail in Fig.2.

[025] To establish the wireless connection with a field device of the field devices 103, the user (for example an operator) may first check list of Bluetooth field devices discovered by the computing device 101. The computing device 101 may detect and receive an advertisement packet broadcasted by the at least one field devices 103. The advertisement packet may include various data fields and field device information which may be decided by a manufacturer of the field device. The user may select one of the field device of the field devices 103 for connection. Upon such selection, the computing device 101 may initiate a login to the application 105 of the computing device 101. On request for the login, the computing device 101 receives login credentials such as, username and password from the user associated with a specific user account. The login credentials are validated and upon successful authentication of the login credentials, the computing device 101 may determine a Bluetooth pairing credential for the selected field device.

[026] The Bluetooth pairing credential is determined using the login credential of the user along with field device information such as, a unique identifier number and a device serial number of the field device. The determination of the Bluetooth pairing credential is explained in Fig.3 in detail. Subsequent to this, a request to the Bluetooth interface of the selected field device is transmitted for Bluetooth pairing along with the determined Bluetooth pairing credentials.

[027] Upon receiving the request, the field device of the field devices 103 perform a validation of the received Bluetooth pairing credential based on stored hashed credentials associated with the user account. The hashed credentials associated with the user account is determined previously by the field device using the login details and associated device serial number. On successful validation, the computing device 101 receives a Bluetooth pairing confirmation from the field device for controlling and accessing the field device.

[028] However, on the other hand, in situations when the login credential is changed and identified, the field devices 103 may be initiated to remove stored information related to previously paired user account. Further, determination of the Bluetooth pairing credential is reinitiated based on new login credentials of the user and field device information.

[029] FIG.2 illustrates a block diagram of a computing device, in accordance with an embodiment of the disclosure. The computing device 101 comprises a communication interface 201, an application 203, a Bluetooth interface 205 and a processor 207.

[030] The communication interface 201 is used for establishing communication and network with other devices/components. For instance, the communication interface 201 is used for receiving the login credentials from the user for accessing and controlling the field devices 103. The application 203 includes a specific application related to the accessing and managing of the field devices 103. The application 203 may include different types of user accounts for each of the field devices 103. The Bluetooth interface 107 is as known in the existing systems which enable wireless connection with compatible devices.

[031] The processor 207 which may be implemented using combination of software and hardware circuitry. The processor 207 is configured to determine the Bluetooth pairing credential for the field device using the login credentials and field device information. FIG. 3 illustrates an exemplary embodiment of determining Bluetooth pairing credential in accordance with an embodiment of the disclosure. The determination of Bluetooth pairing PIN at the computing device 101 and the field device 301 is shown. Generally, every field device is assigned with a unique device serial number. The device serial number may be shared in the advertisement packet while broadcasting by the field device 301.

[032] The application 203 which is intending to pair with the field device receives the field device information. FIG.4A-4B illustrate exemplary scenarios identifying particular field devices in accordance with an embodiment of the disclosure. As shown, a mobile application 401 is connected to field device 403, field device 405, field device 407 and field device 409. Generally, the field device information such as, unique Identifier (UUIDs) is a unique number which is assigned by Bluetooth SIG organization, as standard specific ID to a device manufacturer. For easy reference, Bluetooth device name may be suggested as device serial number. Thus, the user is enabled to view the device serial number as Bluetooth device name. For instance, assume field device 403 and field device 409 are associated with an organisation and are assigned with UUID “0xFD99”. The field device 403 includes serial number as “3K650000000000, field device 409 includes serial number as “3K650000000001”, field device 405 includes serial number as “3K650000000002” and field device 407 includes serial number as “3K650000000002”. In such condition, the mobile application 401 may start capturing advertisement packet and identify all field devices present in proximity. The mobile application 401 may capture only device whose UUID is “0xFF09”, which is to identify field devices associated with the particular organisation and ignore others.

[033] Now, since a user of the organisation may include a list of only those field devices which UUID “0xFF09”. Thus, the user is enabled to identify device through device name (since device name = device serial number) as shown in Fig.4B. Once field device is identified, further processing such as pairing, and connection is enabled.

[034] Returning to Fig.2, the processor 207 thus combines both the login credentials and the device serial number and hash it using for instance, SHA-256 with no salt and truncate it to 6 bytes. This provides the Bluetooth pairing credential. On the other side, the field device 301 includes information such as, user account password and device number in hash format hashed using for instance SHA-256 with no salt), to create the Bluetooth pairing credentials. The hashed content is truncated to 6 bytes which creates a Bluetooth pairing pin credential for validation.

[035] FIG. 5A-5B illustrate flowchart and sequence diagram respectively of a method for providing a wireless connection between a field device of an industrial plant with a computing device, in accordance with an embodiment of the invention.

[036] The steps of the method 500 as shown in Fig.5A are performed by the computing device 101.

[037] The method 500 comprises a first step 502 of receiving the login credentials of the user for the application of the computing device 101 for accessing and controlling the field device. The login credentials may include the account details and password.

[038] In the next step, at 504, the Bluetooth pairing credential for the field device is determined using the login credentials and field device information. The field device information is received from the advertisement packet broadcasted by field devices 103 during device discovery. The field device information includes the unique identifier number and the device serial number of the field device.

[039] In step 506, the request to the Bluetooth interface of the field device is transmitted for Bluetooth pairing along with the determined Bluetooth pairing credentials.

[040] In step 508, the Bluetooth pairing confirmation from the field device is received based on the validation for controlling and accessing the field device. The field device performs the validation of the Bluetooth pairing credential based on the stored hashed credentials associated with the user account. In an embodiment, upon providing the Bluetooth pairing confirmation, information related to the paired computing device is stored in the field device. In Fig.5B, step (1) is equivalent to step 502, step (2) is equivalent to step 504, step (3) is equivalent to 506 and 4-9 are equivalent to step 508 of Fig.5 A.

[041] An embodiment of the present disclosure provides seamless pairing with field devices of industrial plant.

[042] An embodiment of the present disclosure eliminates need for users to keep track of Bluetooth pairing PIN.

[043] An embodiment of the present disclosure eliminates requirement for devices to store Bluetooth pairing PIN.

[044] An embodiment of the present disclosure provides ease of use for the user by avoiding the knowledge of multiple credentials to access the same device by unifying user access credential and Bluetooth pairing credential.

[045] An embodiment of the present disclosure eliminates need of additional credential for connecting the field devices apart from the user credentials.

[046] In an embodiment of the present disclosure, Bluetooth pairing credential is updated as and when user credential is updated.

[047] An embodiment of the present disclosure provides differentiating feature as easy way to pair field devices.

[048] An embodiment of the present disclosure utilizes user authentication information for Bluetooth pairing, hence avoiding additional pairing PIN information.

[049] Many modifications and other embodiments of the disclosures set forth herein will come to mind to one skilled in the art to which these disclosures pertain having the benefit of the teachings presented in the foregoing descriptions and the associated drawings. Therefore, it is to be understood that the disclosures are not to be limited to the specific embodiments disclosed and that modifications and other embodiments are intended to be included within the scope of the appended claims.

[050] Moreover, although the foregoing descriptions and the associated drawings describe example embodiments in the context of certain example combinations of elements and/or functions, it should be appreciated that different combinations of elements and/or functions may be provided by alternative embodiments without departing from the scope of the appended claims. In this regard, for example, different combinations of elements and/or functions than those explicitly described above are also contemplated as may be set forth in some of the appended claims. Although specific terms are employed herein, they are used in a generic and descriptive sense only and not for purposes of limitation.

REFERRAL NUMERALS

Claims

CLAIMS:

1. A method of providing a wireless connection between a field device (301) of an industrial plant with a computing device (101) for controlling an access to the field device (301), wherein the field device (301) comprises a Bluetooth interface for connecting with the computing device (101) and a plurality of user accounts in an application (105, 203) associated with the computing device (101), and the computing device (101) comprises a Bluetooth interface (107, 205) and the application (105, 203) for accessing and controlling the field device (301), the method comprising: receiving, by the computing device (101), login credentials of a user for an application (105, 203) of the computing device (101) for accessing and controlling the field device (301); determining, by the computing device (101), a Bluetooth pairing credential for the field device (301) using the login credentials and field device information on successful authentication of the login credentials, wherein the field device information comprises a unique identifier number and a device serial number of the field device (301); transmitting, by the computing device (101), a request to the Bluetooth interface of the field device (301) for Bluetooth pairing along with the determined Bluetooth pairing credentials; and receiving, by the computing device (101), a Bluetooth pairing confirmation from the field device (301) based on a validation for controlling and accessing the field device (301), wherein the field device (301) performs the validation of the Bluetooth pairing credential based on stored hashed credentials associated with the user account.

2. The method as claimed in claim 1, wherein the field device information is received from an advertisement packet broadcasted by field devices (103) during device discovery.

3. The method as claimed in claim 1, wherein upon providing the Bluetooth pairing confirmation, storing information related to the paired computing device (101) in the field device (301).

4. The method as claimed in claim 3 further comprising: initiating, in the field device (301), removal of the stored information related to previously paired computing device (101), on identifying a change in login credentials of a user associated with a user account in an application (105, 203) of the computing device (101); and reinitiating, determination of a Bluetooth pairing credential based on new login credentials of the user and field device information.

5. The method as claimed in claim 1, wherein the hashed credentials associated with the user account is determined using the login and the device serial number of the field device (301).

6. A computing device (101) for controlling an access to the field device (301), the computing device comprising: a processor (113); and a memory (111) communicatively coupled to the processor (113), wherein the memory (111) stores processor instructions, which, on execution, causes the processor (113) to: receive login credentials of a user for an application (105, 203) of the computing device (101) for accessing and controlling the field device (301); determine a Bluetooth pairing credential for the field device using the login credentials and field device information on successful authentication of the login credentials, wherein the field device information comprises unique identifier and device serial number of the field device (301); transmit a request to the Bluetooth interface of the field device for Bluetooth pairing along with the determined Bluetooth pairing credentials; and receive Bluetooth pairing confirmation from the field device (301) based on a validation for controlling and accessing the field device (301), wherein the field device (301) performs the validation of the Bluetooth pairing credential based on stored hashed credentials associated with the user account.

7. The method as claimed in claim 1, wherein processor (113) receives the field device information from an advertisement packet broadcasted by field devices (103) during device discovery.