DE102013202339A1 - Device and method for managing access codes - Google Patents

Abstract

A device for managing a number of access codes is proposed. The device has a memory, a detection unit and a release unit. The memory is set up to store the number of access codes. The acquisition unit is set up to acquire a current context of use of the device. Furthermore, a release unit is set up for releasing access to the access codes stored in the memory as a function of the current context of use recorded. The risk of misuse of the access codes is thus reduced, since an access code is only accessible to a user if there is a need for it, which is checked by the current context of use. Furthermore, a system with such a device and a server, a method for operating such a device and a corresponding computer program product are proposed.

Description

The present invention relates to an apparatus and a method for managing a number of access codes.

Before accessing critical functions of a device, authentication of the accessing (user) is helpful to prevent misuse. However, control devices, in particular at the field level or in motor vehicles, usually do not support a user concept or a user-related authentication and authorization check, but merely simple authorization levels. Before using functions of a certain authorization level, an appropriate access code (password) must be entered. Alternatively, a corresponding challenge-response authentication can be performed. This reduces the implementation effort, but the administration of access rights to field devices is considerable. In this case, such a device-related access code is generally difficult to use safely, since the access code is made available to many users, for example maintenance technicians, operating personnel and the like.

Furthermore, changing the access code, for example when a single employee leaves the company, is generally impractical. For this reason, there is a need for better protected use of device-related access codes.

The verification of access codes (passwords) is a fundamental security mechanism. Passwords are used differently. Examples include user authentication and device access codes. During user authentication, a specific user authenticates himself via a password. The password is known only to the user and the responsible authentication service. The device access code or access code is suitable for accessing a protected function of a device. An example of this is an administrator password. The access code is known to the device and all users who have access. This means that the number of users with access rights can increase significantly over time. An example of the access code (device password) can be found in DSL routers. In general, a device can support several different access codes, which are assigned different authorization levels.

Furthermore, software programs for password management are known (for example Password Store). These support the management of company passwords and departmental passwords. It is known to disable the plain text display of an entry, so that the password can only be used with an automatic password entry. The clear text password can thus remain hidden from a user. However, this only works on a single system.

Furthermore, single-sign-on (SSO) systems are known, for example Kerberos. In this case, a user authenticates first to a logon server and receives an authentication token as a data structure, with which he can access protected access to other services. As a result, a user only has to authenticate themselves once to the SSO server, for example by means of a password input, but not separately for each service. However, it is necessary for the service to support the SSO procedure accordingly. This makes it unsuitable for simple devices that only support device access codes.

Out IEC 62351-8 It is known to use an X.509 certificate with a role extension for checking access authorization on field devices. In this case, the field device checks only the possession of the private key, for example in the context of transport layer security (TLS) by a challenge-response method, but then evaluates only the role information contained for the issue of access authorization.

Furthermore, so-called digital exchanges for mobile devices are known, which manage several different data objects, such as coupon codes, tickets, boarding cards and the like.

Furthermore, from the DE 10 2007 046 079 A known to use a mobile TAN for remote maintenance access in the automation environment. An SMS message is used here to identify a mobile TAN, which in turn can be used in a login process.

Out US 2012 294445 A1 It is known to encrypt a credential with a user password, to encrypt the password provided by the user with a key generated by a server, and to store both in a separate structure. This allows access to the actual secret through the user password (if known) or through the server-generated key to decrypt the user password and then the secret.

It is an object of the present invention to more easily and securely manage access codes for various devices.

This object is solved by the independent claims. Further developments of the invention can be found in the dependent claims.

Accordingly, an apparatus for managing a number of access codes, in particular device-related access codes, is proposed. The device has a memory, a detection unit and a release unit. The memory is set up to store the number of access codes. The detection unit is set up to detect a current usage context of the device. Furthermore, the release unit is arranged to release access to the access codes stored in the memory in dependence on the detected current usage context.

Accordingly, the release unit only releases access to the access codes stored in the memory if the current usage context permits it. Thus, the usage context of the device defines conditions for access and output of the access codes by the device.

This reduces the risk of misuse of the access codes, since an access code is only accessible (visible) to a user if there is a need for it, which is checked by the current usage context.

The access code can be configured, for example, as a password, as a PIN (Personal Identification Number), as a password or as a device password. The respective access code is associated with a device, a device, a website on the Internet or the like. The device may be, for example, a field device of an industrial environment.

The device may for example be integrated on a mobile device, such as a remote control for field devices or industrial equipment, on a smartphone or even on a server application.

In this way, a secure and convenient use of a security check for access to access codes that is easy to implement for field devices and similarly limited devices can be created. In this case, it is also possible in particular to integrate existing field devices which only support such simple access authentication. In this case, the access code is managed via the memory of the device.

The ability to centrally manage the memory entries for the access codes in the device allows the required memory entries to be made available automatically.

In one embodiment, the device has a communication unit for receiving a request for a particular access code of the number of access codes stored in the memory.

Depending on the received request, the release unit may select and issue the requested access code from the plurality of access codes stored in the memory. Thus, the selection of the correct, suitable access code with regard to the use of a plurality of access codes or passwords is automated and thus simplified. In one variation, the store may not store actual permissions, but only references to permissions that are then provided to the requesting device. The access codes of the memory then form these references.

In another embodiment, the enabling unit is configured to enable access to the particular access code if the detected current usage context and the received request are allowable.

Advantageously, two admissibility conditions are checked here before the access to the requested access code is released. On the one hand, the current usage context of the device with regard to release must be permissible. Furthermore, the received request must be allowed. Here it is possible to allow only requests from a particular group of requesting entities. Furthermore, the admissibility check of the request may also include an authentication of the sender, the requesting device.

As already explained above, the request can be used to automatically select the correct access code suitable in the current user context. For example, the current user context may include checking a current time, a current location or a current ID of the target device, for example, captured via a barcode or via an RFID reader. Thus, even with field devices that use a standard URL or a standard IP address and therefore can not be distinguished on the basis of the network address, the appropriate memory entry with regard to the access code can be automatically selected.

In a further embodiment, the memory is set up to store for each access code a memory entry which, in addition to the access code, comprises an identification of the access code and at least one admissibility restriction.

The admissibility restriction limits the permissible access to the access codes or a selected access code, in particular locally, temporally and / or situationally.

In a further embodiment, the identification of the access code as a device Designated identifier of the access code associated device.

The identifications of the access codes may preferably be displayed or output independently of the current usage context of the device. Thus, a user of the device is always aware, in particular independently of the current context of use, which access codes of which devices the memory of the device manages.

• – Zulässigkeitsprüfung eines aktuellen Ortes der Vorrichtung im Hinblick auf eine örtliche Zulässigkeitsbeschränkung,
• – Zulässigkeitsprüfung eines aktuellen Zeitpunktes im Hinblick auf eine zeitliche Zulässigkeitsbeschränkung, und
• – Zulässigkeitsprüfung eines aktuellen Status der Vorrichtung im Hinblick auf eine statusbezogene Zulässigkeitsbeschränkung.

In a further embodiment, the enabling unit is adapted to enable access to the access codes stored in the memory if at least a predetermined number of validity checks of the following are positive:

• - admissibility check of a current location of the device with regard to a local admissibility restriction,
• - admissibility check of a current time with regard to a temporal limitation of admissibility, and
• - Admissibility check of a current status of the device with regard to a status-related permissive restriction.

For this purpose, the device preferably comprises a first detection means for detecting the current location of the device. The first detection means may comprise, for example, a satellite navigation receiver. For detecting the current time, the device further has a second detection means, which is designed for example as an integrated real-time clock. To detect the current status of the device, individual information inherent in the device can be used. For example, status messages via interfaces of the device are used for this purpose. Location information of the device can also be used. The current status of the device can in particular be managed in a control device of the device, for example a microcontroller.

• – Zulässigkeitsprüfung eines aktuellen Ortes der Vorrichtung im Hinblick auf eine örtliche Zulässigkeitsbeschränkung,
• – Zulässigkeitsprüfung eines aktuellen Zeitpunktes im Hinblick auf eine zeitliche Zulässigkeitsbeschränkung, und
• – Zulässigkeitsprüfung eines aktuellen Status der Vorrichtung im Hinblick auf eine statusbezogene Zulässigkeitsbeschränkung.

In a further embodiment, the enabling unit is adapted to enable access to the access codes stored in the memory if a plurality of validity checks of the following are positive:

• - admissibility check of a current location of the device with regard to a local admissibility restriction,
• - admissibility check of a current time with regard to a temporal limitation of admissibility, and
• - Admissibility check of a current status of the device with regard to a status-related permissive restriction.

In this embodiment, the access to the access codes of the memory is allowed only in the presence of a plurality of positive admissibility checks. Here a voting, also a weighted voting, can be used.

• – Zulässigkeitsprüfung eines aktuellen Ortes der Vorrichtung im Hinblick auf eine örtliche Zulässigkeitsbeschränkung,
• – Zulässigkeitsprüfung eines aktuellen Zeitpunktes im Hinblick auf eine zeitliche Zulässigkeitsbeschränkung, und
• – Zulässigkeitsprüfung eines aktuellen Status der Vorrichtung im Hinblick auf eine statusbezogene Zulässigkeitsbeschränkung.

In a further embodiment, the enabling unit is adapted to enable access to the access code stored in the memory if all the following admissibility checks are positive:

• - admissibility check of a current location of the device with regard to a local admissibility restriction,
• - admissibility check of a current time with regard to a temporal limitation of admissibility, and
• - Admissibility check of a current status of the device with regard to a status-related permissive restriction.

This embodiment is a particularly secure variant, since all admissibility checks must be positive in order to allow access to the access codes of the memory.

• – Verfügbarkeit eines bestimmten Kommunikationsnetzes,
• – Verfügbarkeit einer bestimmten Kommunikationsverbindung,
• – Verfügbarkeit eines bestimmten Kommunikationspartners,
• – Authentifizierungsstatus eines Nutzers der Vorrichtung
• – Bestimmte räumliche Lage der Vorrichtung,
• – bestimmte Umgebung der Vorrichtung,
• – bestimmter Zustand eines durch die Vorrichtung abarbeitbaren Workflows,
• – bestimmter Zählerstand für einen Aufruf der Zugangscodes, und
• – bestimmte Aktion des Nutzers der Vorrichtung.

In another embodiment, the status-based allowance restriction indicates at least one status of the device for allowable access to the access codes stored in the memory. The at least one status comprises at least one of the following:

• - availability of a specific communication network,
• - availability of a specific communication connection,
• - availability of a specific communication partner,
• Authentication status of a user of the device
• Certain spatial position of the device,
• Certain environment of the device,
• Certain state of a workflow that can be processed by the device,
• - specific count for a call of the access codes, and
• Certain action of the user of the device.

For example, the access is only allowed if a particular communication network is available, over which the output of the requested access code can then take place. Such a particular communication network may in particular be a secure communication network. The same applies to the status of the particular communication connection, the particular communication partner and the authentication status of the user of the device.

It is also possible to use as a status the spatial position of the device. If the device is integrated, for example, in a smartphone, it can thus be checked whether the user is actually looking at the display of the smartphone or whether the smartphone is being carried, for example, almost vertically in a jacket pocket. In the case of the former access can be allowed, whereas in the latter case the access can be negated. The status of the environment of the device may also contribute to the status-related permissive restriction. For example, the device, in particular by means of a camera, to check whether it is actually in the specific environment. If the device, for example, for a particular industrial plant, for example, for a dedicated warehouse, unlocked, it can be checked via the camera, whether the device is actually used in this warehouse or not. In the latter case access is denied.

The state of a workflow that can be processed by the device can also contribute to status-related admissibility restriction. For example, certain access codes are only released depending on a status of the workflow. However, on the other hand, if certain workflows are not yet processed, certain access codes necessary for later steps of the workflow will not be released. A workflow can be e.g. mapped by a maintenance technician to be processed subtasks.

Also, the count for a call of a particular access code or access codes may contribute to the status-related allowance restriction, in particular, access may be denied when a certain number of calls are exceeded. Also, a particular action of the user of the device may be included in the status-based allowance constraint. For example, the release of a particular access code may require a certain sequence of previous actions by the user.

In a further embodiment, the device has an output unit for outputting the enabled access codes.

In a further embodiment, the output unit comprises visual output means for visually outputting the enabled access codes.

The visual output device comprises in particular a screen (display), via which the releasing access codes can be visually output to a user.

In a further embodiment, the output unit comprises acoustic output means for acoustically outputting the enabled access codes.

In particular, the acoustic output means comprises a loudspeaker for acoustically outputting to the user the enabling access codes.

In a further embodiment, the output unit comprises transmission means for transmitting the released access codes to a device requesting the access codes.

In particular, the transmission means comprises a data interface to the requesting device for transmitting the access codes to the requesting device by telecommunications.

In the case of the visual output of the access codes, these may also preferably be output in a blinded form to the user. This means that abuse is made more difficult by the nature of the representations. The representation can be done as a graphic (no copyable text) with a background image, which makes it difficult to copy, for example, by watermarking. The display of the complete access code can be done in partial access codes displayed at a staggered time, for example in places or in sections. The blinded form of representation of the access code can be, for example, a QR code, a bar code, a flicker code or the like, which has to be read in by the requesting device. The transmission means may be designed, for example, as a wired interface or a wireless interface.

In a further embodiment, the output unit is configured to output the identifications of the access codes stored in the memory independently of the detected current usage context.

By being able to issue the identifications independently of the detected current access code, the user of the device can always be informed as to which access codes are managed by the device without actually having to issue them.

In a further embodiment, the device has an authentication unit for authenticating a device requesting at least one access code. In this case, the release unit is set up to release an access for the requesting device to the access code stored in the memory, if the detected current usage context is permissible and the requesting one Device is authenticated by the authentication unit.

This ensures that only authenticated users of the device access codes can query. Furthermore, the access to the memory of the device can be logged, that is, an information is created who has accessed an access code. The current usage context can also be recorded and logged. This logged information can be reused for later authentication.

In a further embodiment, the device has a communication unit for communicating with a server, which is arranged to control the management of the access codes stored in the memory of the device.

The communication unit can be set up for a plurality of different communication standards and have corresponding interfaces. In a further variant, the use of the device by the server can be explicitly enabled. This corresponds to an enterprise digital rights and management (eDRM) protection of the actual memory of the device on the device assigned to the user.

The respective unit, for example detection unit, release unit and communication unit, can be implemented in terms of hardware and / or software. In a hardware implementation, the respective unit may be embodied as a device or as part of a device, for example as a computer or as a microprocessor. In a software implementation, the respective unit may be designed as a computer program product, as a function, as a routine, as part of a program code or as an executable object.

Further proposed is a system having a device for managing a number of access codes and a server as described above. The server is arranged to control the management of the access codes stored in the memory of the device.

The server controls, in particular manages, the device and thus the memory and the access codes stored in the memory. This allows access codes to be imported, updated and deleted from a central location. In a variant, an automatic revocation of an access code by the server can take place, for example, if for a long time no synchronization with the server has taken place. Then, access codes can be automatically deleted or become inaccessible if the server has not been checked for a certain period of time.

Furthermore, a method for operating a device for managing a number of access codes is proposed. The device has a memory for storing the number of access codes. In a first step, a current usage context of the device is detected. In a second step, access to the access codes stored in the memory is released in dependence on the detected current usage context.

Furthermore, a computer program product is proposed, which causes the execution of the method as explained above on a program-controlled device.

A computer program product such as a computer program means can be provided or supplied, for example, as a storage medium, such as a memory card, USB stick, CD-ROM, DVD or in the form of a downloadable file from a server in a network. This can be done, for example, in a wireless communication network by transmitting a corresponding file with the computer program product or the computer program means.

In addition, a data carrier with a stored computer program with instructions is suggested, which cause the execution of the method as explained above on a program-controlled device.

The above-described characteristics, features, and advantages of this invention, as well as the manner in which they will be achieved, will become clearer and more clearly understood in connection with the following description of the embodiments, which will be described in detail in conjunction with the drawings.

Showing:

1 a block diagram of a first embodiment of an apparatus for managing access codes;

2 a block diagram of a second embodiment of an apparatus for managing access codes;

3 a schematic view of an example of a permission restriction of an access code;

4 a block diagram of a third embodiment of an apparatus for managing access codes;

5 a flowchart of an embodiment of a method for operating a device for managing access codes;

6 an example of communication between a device for managing access codes of field devices, a field device and a server for controlling the device; and

7 a flow chart for the communication of 6 , In the figures, the same or functionally identical elements have been given the same reference numerals, unless stated otherwise.

In 1 is a block diagram of a first embodiment of a device 10 for managing access codes C1-C4. The respective access code C1-C4 is suitable for granting the user access to a specific device, device or the like, for example a website or a maintenance interface. An example of such a device is a field device in an industrial environment.

The device 10 of the 1 has a memory 11 for storing the access code C1-C4, a detection unit 12 and a release unit 13 on. The memory 11 has a memory entry S1-S4 for each access code C1-C4.

The registration unit 12 is set up to have a current usage context K of the device 10 capture. For example, the use context K includes a temporal aspect, a local aspect and / or a situational aspect.

The release unit 13 is set up to access Z in memory 11 stored access code C1-C4 in response to a detected current usage context K release. In other words, the release unit 12 gives the access Z to the memory 11 then free, if the current usage context K grants access. To control the access Z, the release unit 13 For example, use a release signal (not shown). An access is in 1 schematically by means of an arrow from the release unit 13 on the memory 11 illustrated. It is possible to define certain permission constraints which allow access Z to the memory 11 exclude (see 2 and 3 ).

2 shows a block diagram of a second embodiment of a device 10 for managing access codes C1-C4. The second embodiment of the 2 is based on the first embodiment of 1 , wherein the device 10 of the 2 in addition a communication unit 14 shows which device requesting at least communication with a particular access code C1-C4 20 is trained.

For example, the communication unit 14 a request A (request message) for a particular access code C1-C4 of the number of times in the memory 11 stored access codes C1-C4 received. In other words, the device 20 requests a certain access code C1-C4 from the device 10 at. The release unit 13 gives the access Z to the particular access code C1-C4 of the requesting device 20 then free, if the detected current usage context K of the device 10 as well as the received request A of the device 20 are permissible. In a positive case, the device can 10 output the requested access code C1-C4. This output can be audible, visual or by a telecommunications transmission of the requested access code C1-C4 to the device 20 respectively.

Request A of the facility 20 For example, it includes an identification ID1-ID4 of the requested access code C1-C4. This is the memory 11 preferably configured to manage a memory entry S1-S4 for each access code C1-C4 in such a way that, in addition to the access code C1-C4, it also includes the identification ID1-ID4 of the access code C1-C4 and at least one permissibility restriction B1-B4. The identification ID1-ID4 of the access code C1-C4 is designed, for example, as a device identifier of a device associated with the access code C1-C4, in particular a field device. The admissibility restriction B1-B4 restricts the permissibility of access to the respective access code C1-C4. Details can be found in the 3 , This shows the 3 a schematic view of an example of a permission restriction B1 access code, as exemplified in 1 or 2 is shown.

The admissibility restriction B1 of the 3 includes a local allowance restriction L, a temporal allowance restriction T, and a status-related allowance restriction S. For example, the local allowance restriction L indicates at which location, locations, or area access to the store 11 the device 10 is possible. Accordingly, the temporal permissiveness restriction T indicates, at which time, at which times, in which period and / or in which time periods, access to the access codes C1-C4 of the memory 11 the device 10 is possible.

• – Verfügbarkeit eines bestimmten Kommunikationsnetzes,
• – Verfügbarkeit einer bestimmten Kommunikationsverbindung,
• – Verfügbarkeit eines bestimmten Kommunikationspartners,
• – Authentisierungsstatus eines Nutzers der Vorrichtung 10,
• – bestimmte räumliche Lage der Vorrichtung 10,
• – bestimmte Umgebung der Vorrichtung 10,
• – bestimmter Zustand eines durch die Vorrichtung 10 abarbeitbaren Workflows,
• – bestimmter Zählerstand für einen Aufruf der Zugangscodes C1–C4, und
• – bestimmte Aktion des Nutzers der Vorrichtung 10.

The status-related permissive restriction S gives at least one status of the device 10 for an allowable access Z to those in the memory 11 stored access codes C1-C4. The at least one status includes at least one of the following:

• - availability of a specific communication network,
• - availability of a specific communication connection,
• - availability of a specific communication partner,
• Authentication status of a user of the device 10 .
• - certain spatial position of the device 10 .
• - Certain environment of the device 10 .
• - Certain state of a through the device 10 executable workflows,
• Certain counter reading for access codes C1-C4, and
• Certain action of the user of the device 10 ,

• – Zulässigkeitsprüfung eines aktuellen Ortes der Vorrichtung 10 im Hinblick auf eine örtliche Zulässigkeitsbeschränkung L,
• – Zulässigkeitsprüfung eines aktuellen Zeitpunktes im Hinblick auf eine zeitliche Zulässigkeitsbeschränkung T, und
• – Zulässigkeitsprüfung eines aktuellen Status der Vorrichtung 10 im Hinblick auf eine statusbezogene Zulässigkeitsbeschränkung S.

In the light of the example of 3 can the release unit 13 of the 1 or the 2 be set up to access Z in the memory 11 stored access codes C1-C4, if at least a predetermined number of admissibility checks of the following is positive:

• - Admissibility check of a current location of the device 10 with regard to a local permissibility restriction L,
• - Admissibility check of a current point in time with regard to a temporal admissibility restriction T, and
• - Admissibility check of a current status of the device 10 with regard to a status-related admissibility restriction S.

For example, the sharing device becomes 13 Only release the access Z if a majority of the admissibility checks, preferably all admissibility checks, are positive.

In 4 is a block diagram of a third embodiment of a device 10 for managing access codes C1-C4. Next to the device 10 are in the 4 also a facility 20 which requests an access code C1-C4 by means of a request A, and a server 30 , which controls the device 10 is set up.

The server 30 is especially designed to manage the in the memory 11 the device 10 to control stored access codes C1-C4. The control of the administration includes the deletion of access codes C1-C4, the addition of access codes C1-C4 and / or the modification of access codes C1-C4. For this purpose, control signals X by the server 30 used. The control signals X also include responses of the device 10 to the server 30 ,

The registration unit 12 of the 4 includes a first detection means 21 for detecting the current location of the device 10 , a second detection means 22 for recording a current time and a third detection means 23 for detecting at least one current status of the device 10 , This information, current location, current time, current status, form the usage context 10 the device 10 and are compared with the admissibility restrictions B1-B4 (see for example 3 ).

The first means of detection 21 for example, includes a satellite navigation receiver, the second detection means 22 is designed, for example, as a real-time clock, and the third detection means 23 For example, it may include a bar code reader, an NFC reader, and other means for detecting the status of the device 10 include. These other means may also be parts of the microcontroller of the device 10 to use certain status information inherent in it.

Furthermore, the device has 10 of the 4 an authentication unit 19 for authentication of the requesting device 20 , The authentication unit 19 is for example in the release unit 13 integrated. Where is the release unit 13 then set up to access Z for the requesting device 20 on the in the store 11 to release stored access codes C1-C4 if the detected current usage context K is allowed and the requestor device 20 through the authentication unit 19 is authenticated.

Furthermore, the device has 10 of the 4 an output unit 15 , which is adapted to released access codes C1-C4, in particular the requesting device 20 to spend.

For example, the output unit comprises 15 visual output means 16 , acoustic output means 17 and / or transmission means 18 , The visual output device 16 are adapted to visually output the enabled access codes C1-C4. This can be done by the visual output device 16 In particular, comprise a screen or a display and output the shared access codes in particular in a blinded form. The acoustic output means 17 In particular, they comprise a loudspeaker and are suitable for acoustically outputting the enabled access codes C1-C4. The transmission medium 13 is configured to request the shared access codes C1-C4 to the requesting Facility 20 telecommunications technology. In this case, the transmission means 18 For example, use a cable connection, an infrared connection or a wireless connection.

In 5 FIG. 10 is a flow chart of one embodiment of a method for operating a device. FIG 10 for managing a number of access codes C1-C4. The device 10 has a memory 11 for storing the number of access codes C1-C4.

In step 501 becomes a current usage context K of the device 10 detected.

In step 502 will be accessing the memory 11 stored access codes C1-C4 in response to the detected current usage context K released.

In 6 is an example of communication between a device 10 for managing access codes of field devices 20 , a field device 20 and a server 30 for controlling the device 10 shown. The device 10 in the 6 For example, a smartphone with a camera used by a service technician to access a field device 20 to have. The communication of 6 will be described with reference to the flowchart of 7 explained.

In step 700 of the 6 (not explicitly shown in 7 ) will be service technician information from the smartphone 10 to the server 30 transfer. In step 701 becomes a service task in the context of a workflow to the technician and thus his smartphone 10 assigned. In step 702 Depending on the assigned service task, a number of access codes are sent by the server 30 certainly. Access codes required to perform a service task may be present, eg in a database, or they may be generated. In step 703 These access codes will be sent to the smartphone 10 transmitted by the service technician.

In step 704 becomes the usage context of the smartphone 10 captured by being automatically or triggered by a specific proximity between the smartphone 10 and the field device 20 a QR code of the field device 20 from the camera of the smartphone 10 is read. This captured current usage context is the access code for the field device 20 unlocked. The unlocked access code will be in step 705 from the smartphone 10 to the field device 20 transfer. In step 706 becomes the transmitted access code from the field device 20 checked, taking in step 707 (in the negative case) access is denied, whereas in step 708 (in a positive case) access is granted.

Although the invention has been further illustrated and described in detail by the preferred embodiment, the invention is not limited by the disclosed examples, and other variations can be derived therefrom by those skilled in the art without departing from the scope of the invention.

QUOTES INCLUDE IN THE DESCRIPTION

This list of the documents listed by the applicant has been generated automatically and is included solely for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Cited patent literature

• DE 102007046079 A [0009]
• US 2012294445 A1 [0010]

Cited non-patent literature

• IEC 62351-8 [0007]

Claims (15)

Contraption ( 10 ) for managing a number of access codes (C1-C4), comprising: a memory ( 11 ) for storing the number of access codes (C1-C4), a registration unit ( 12 ) for detecting a current usage context (K) of the device ( 10 ), and a release unit ( 13 ) for enabling access (Z) to the memory in the memory (Z) 11 ) stored access codes (C1-C4) in dependence on the detected current usage context (K). Device according to claim 1, characterized by a communication unit ( 14 ) for receiving a request (A) for a particular access code (C1-C4) the number of in the memory ( 11 ) stored access codes (C1-C4). Apparatus according to claim 2, characterized in that the release unit ( 13 ) is adapted to enable access (Z) to the particular access code (C1-C4) if the detected current usage context (K) and the received request (A) are allowed. Device according to one of claims 1-3, characterized in that the memory ( 11 ) is arranged to store for each access code (C1-C4) a memory entry (S1-S4) which, in addition to the access code (C1-C4), an identifier (ID1-ID4) of the access code (C1-C4) and at least one Permissibility restriction (B1-B4). Device according to claim 4, characterized in that the identification (ID1-ID4) of the access code (C1-C4) is formed as a device identifier of a device associated with the access code (C1-C4). Apparatus according to claim 4 or 5, characterized in that the release unit ( 13 ) is adapted to access (Z) to the memory in the memory ( 11 ) if at least a predetermined number of admissibility checks are positive for the following: Admissibility check of a current location of the device (c) 10 ) with regard to a local admissibility restriction (L), - admissibility check of a current time point with regard to a temporal admissibility restriction (T), and - admissibility check of a current status of the device with regard to a status-related permissive restriction (S). Apparatus according to claim 4 or 5, characterized in that the release unit ( 13 ) is adapted to access (Z) to the memory in the memory ( 11 ) access codes (C1-C4) if a plurality of admissibility checks are positive for the following: - admissibility check of a current location of the device ( 10 ) with regard to a local admissibility restriction (L), - admissibility check of a current time point with regard to a temporal admissibility restriction (T), and - admissibility check of a current status of the device with regard to a status-related permissive restriction (S). Device according to claim 6 or 7, characterized in that the status-related permissive restriction (S) at least one status of the device ( 10 ) for allowable access (Z) to those in the memory ( 11 ) indicates at least one of the following: - availability of a particular communication network, - availability of a particular communication connection, - availability of a particular communication partner, - authentication status of a user of the device ( 10 ), - certain spatial position of the device ( 10 ), - certain environment of the device ( 10 ), - certain state of a through the device ( 10 ) executable workflows, - specific count for calling the access codes (C1-C4), and - certain action of the user of the device ( 10 ). Device according to one of claims 1-8, characterized by an output unit ( 15 ) for issuing the released access codes (C1-C4). Apparatus according to claim 9, characterized in that the output unit ( 15 ) comprises: - visual output means ( 16 ) for visually issuing the released access codes (C1-C4), in particular for visually outputting the released access codes (C1-C4) in blinded form, - audible output means (A) for acoustically outputting the enabled access codes (C1-C4) and / or Transmission means ( 18 ) for transmitting the released access codes (C1-C4) to a device requesting the access codes ( 20 ). Device according to one of claims 4-10, characterized in that the output unit ( 15 ) is set up in the memory ( 11 ) stored identifications (ID1-ID4) of the access codes (C1-C4) independently of the detected current usage context (K). Device according to one of claims 1-11, characterized by an authentication unit ( 19 ) for authenticating a device requesting at least one access code (C1-C4) ( 20 ), whereby the release unit ( 13 ) is arranged to provide access (Z) to the requesting device ( 20 ) in the memory ( 11 ) access code (C1-C4) stored if the detected current usage context (K) is admissible and the requesting device ( 20 ) by the authentication unit ( 19 ) is authenticated. Device according to one of claims 1-12, characterized by a communication unit ( 14 ) for communication with a server ( 30 ), which is used to control the management of 11 ) of the device ( 10 ) stored access codes (C1-C4) is established. System comprising: a device ( 10 ) for managing a number of access codes (C1-C4) according to one of claims 1 to 13, and a server ( 30 ) for controlling the management of the memory in the memory ( 11 ) of the device ( 10 ) stored access codes (C1-C4). Method for operating a device ( 10 ) for managing a number of access codes (C1-C4) containing a memory ( 11 ) for storing the number of access codes (C1-C4), comprising the steps of: detecting ( 501 ) of a current usage context (K) of the device ( 10 ), and Share ( 502 ) of access (Z) to that in the memory ( 11 ) stored access codes (C1-C4) in dependence on the detected current usage context (K).

Images