This application claims priority from German Priority Patent Application No. 10 2015 113 885.9 filed on Aug. 21, 2015, the contents of which are incorporated herein by reference.
The invention relates to an installation which is formed by means of a refrigerating installation, lifting gear, a ventilator or a pump installation having at least one electric motor with at least one installation component for monitoring and/or adjusting the electric motor, wherein the installation component has a bidirectional interface for a bidirectional communication path which is intended to be constructed in situ with a user.
Numerous installations, such as, for example, cold storage houses and power stations, are connected to the Internet without adequate safety provisions and are thus hardly protected from attacks by hackers. With a few clicks of the mouse, such installations can be taken over and manipulated. The best possible protection of such installations is provided when the control of the installation can be carried out only in situ and there is no external connection, in particular with respect to the Internet. Although there are a large number of installations which can be operated effectively in this manner, progress is advancing in another direction, that is to say, towards increased networking of different components. The installations can thereby process a large amount of information and thereby optimise the operating method. The remote requesting of information, the maintenance and the control of an installation remotely are also features which many people appreciate. It is thus no longer a problem nowadays to control the heating in a house using a mobile phone. Even in the car, it is possible to control, for example, the auxiliary heating and the air conditioning using a mobile phone.
An object of the invention is to improve the security of a refrigerating installation, lifting gear, a ventilator or a pumping installation having at least one electric motor and having at least one installation component for monitoring and/or adjusting the electric motor.
This object is achieved according to the invention with the features of claim 1.
The installation according to the invention which is formed by means of a refrigerating installation, lifting gear, a ventilator or a pump installation provides for at least one electric motor and at least one installation component for monitoring and/or adjusting the electric motor, wherein the installation component has a bidirectional interface for a bidirectional communication path which is intended to be constructed in situ with a user and a unidirectional communication path in order to transmit data from the at least one installation component to a gateway.
Via the unidirectional communication path, it is consequently possible to transmit all the desired data regarding the status of the installation which are stored via the gateway on a server which is accessible via the Internet and which can be requested there by authorised users. Access to the installation component via the gateway is denied as a result of the unidirectional construction of the communication path so that no data can be transmitted from the gateway to the at least one installation component.
It is naturally necessary for the installation component to nonetheless be able to be parameterised or adjusted by a user. This is carried out according to the invention via the bidirectional interface of the installation component with a bidirectional communication path which is intended to be constructed in situ with the user. A parameterisation or adjustment of the installation component is consequently possible only via the bidirectional communication path which is intended to be constructed in situ.
According to a preferred embodiment of the invention, the unidirectional communication path is constructed as a unidirectional cable or as a wireless connection. The bidirectional communication path may also be constructed as a bidirectional cable or as a wireless connection. Although a wireless connection must always potentially be considered to be non-secure, since the bidirectional communication path is constructed in situ it only has to be ensured that the region of the bidirectional communication path is a protected region, for example, company premises. The greatest possible security is provided when the bidirectional communication path is produced with a cable from the bidirectional interface to a reading and input device of the user, wherein the reading and input device has no connection to other networks.
According to another embodiment of the invention, the unidirectional communication path is also connected to the bidirectional user interface, wherein the unidirectional construction of the communication path nonetheless enables only a transmission of data from the at least one installation component to the gateway and not vice versa.
In order to further increase the security, the unidirectional communication path may be constructed between the at least one installation component and the gateway and/or the bidirectional communication path between the interface and the user on the bit transmission layer in accordance with the OSI model. OSI stands for Open System Interconnection and was developed and standardised by the ISO as a basis for the formation of communication standards. The bit transmission layer forms the lowest layer in this instance and provides mechanical, electrical and other functional auxiliary means in order to activate or deactivate physical connections, to maintain them and to transmit bits via them. These may, for example, be electrical signals, optical signals, electromagnetic waves or sound.
The at least one installation component may be a protection device for monitoring an additional installation component and/or an actuation member for adjusting an additional installation component, wherein the additional installation component may in particular be an electric motor.
Other embodiments of the invention are explained in greater detail below with reference to the description and the drawings, in which:
The installation 1 illustrated in
In order to nonetheless be able to view the operating method and/or the status of the installation 1 remotely, there is provided at least one gateway 6 which is connected to the installation 2 via a unidirectional communication path 7 in order to transfer data from the at least one installation component 2 to the gateway 6. The gateway 6 may be connected to at least one network, in particular to the Internet. As a result of the unidirectional construction of the communication path 7, only data from the installation component 2 can be transmitted to the gateway, whilst a transmission from the gateway 6 to the installation component 2 is not possible as a result of the lack of an appropriate physical connection. In principle, the unidirectional communication path 7 may also be produced as a unidirectional cable or as a wireless connection. Preferably, both the bidirectional communication path 4 and the unidirectional communication path 7 use the same interface 3 on the installation component 2.
In order to ensure the unidirectional nature of the communication path 7, the unidirectional communication path is also constructed between the installation component 2 and the gateway 6 on the bit transmission layer in accordance with the OSI model. The gateway 6 is, for example, connected to a server 8 which is accessible via the Internet and on which via the installation component 2 data relating to the operating method and the status of the installation 1 are stored. It is thus possible for authorised users to remotely request information relating to the installation 1 via a correspondingly encrypted connection with a high level of authentication. As a result of the unidirectional communication path 7, however, no changes to the installation are possible remotely. It is thus possible to carry out an intervention in the installation component 2 only via the unidirectional communication path 4 which is intended to be constructed in situ. Since a protection of an installation is in any case possible only when it is in a secured or protected region, this protection of the installation is also ensured when the bidirectional communication path 4 is constructed in this protected region.
The installation component for monitoring and/or adjusting the installation is, for example, a protection device which monitors an electric motor 9 which is connected to a compressor with respect to its current consumption, voltage consumption and/or (winding) temperature or the oil level of the compressor. If, for example, operation of the compressor or electric motor is determined outside a desired range, a corresponding correction can be carried out via a corresponding actuation member 10.
The desired ranges of the individual parameters which are intended to be monitored are stored in the installation component 2 and can be changed in situ by a user only via the bidirectional communication path 4 which is intended to be constructed locally, should this become required. In this manner, the installation 1 is effectively protected from manipulation via the Internet.
Number | Date | Country | Kind |
---|---|---|---|
10 2015 113 885.9 | Aug 2015 | DE | national |