Patent ID: 7502323
Filing Date: 2009-03-10
Classification: H04L

Abstract:
1. System for controlling access to one or several automation equipments connected to a first communication network, from at least one client station connected to a second communication network, comprising: identification means for identifying at least one user of the client station; determination means for determining a functional profile of the identified user containing a list of business functions that the identified user is authorized to carry out on the automation equipment; analysis means for analyzing a content of a frame sent on the second communication network by the identified user, in order to determine a request in said frame together and a destination automation equipment; definition means for defining a filter profile for the destination automation equipment, containing a list of requests that the destination automation equipment is capable of receiving, for each business function; and filter means for authorizing or prohibiting transmission of said sent frame on the first communication network, according to said sent frame, said functional profile of the identified user and the filter profile of the destination automation equipment, wherein the determination means for determining a functional profile use at least one functional profiles library accessible to the system, and wherein the definition means for determining a functional profile use the at least one filter profiles library accessible to the system and including a list of authorized requests belonging to one or several communication protocols, for a given automation equipment and for a given business function.