Granted Patent B2

US 8,397,075 · App. 12/855,505 · Granted Mar 12, 2013

Abstract

Claims (23)

1. A method for access control to installation control systems of wind energy installations, comprising:

receiving a requested user name and a requested password, wherein authorizations and checking information are coded in the requested password;

decoding the authorizations and the checking information from the requested password;

checking the requested user name on the basis of the decoded checking information;

checking the decoded authorizations if the check of the requested user name on the basis of the decoded checking information has a positive result; and

allowing access to an installation control system of a wind energy installation when the decoded authorizations are sufficient.

2. The method of claim 1 , wherein each function of the installation control system is assigned authorization requirements and, when selecting a function of the installation control system, the decoded authorizations are checked against the authorization requirements for this function.

3. The method of claim 1 , wherein the authorizations comprise at least one of a user group, a user level, a wind energy installation access class, and an expiry date.

4. The method of claim 3 , wherein the expiry date is formed as a validity period from a key date.

5. The method of claim 4 , wherein the validity period is formed in days or months.

6. The method of claim 1 , wherein at least one of the authorizations and the password is encrypted during or after coding and is decrypted before or during decoding.

7. The method of claim 6 , wherein a symmetrical or asymmetric encryption method is used for encryption and decryption.

8. The method of claim 6 , wherein a first key is used for at least one of encryption and decryption of the authorizations provided, of the password of a first user group, or of both, and a second key or a second encryption method is used for a second user group.

9. The method of claim 1 , wherein access to the installation control system is refused if the requested user name is found on a list of blocked user names.

10. The method of claim 1 , wherein the password is generated by a coding unit separate from the installation control system.

11. The method of claim 1 , wherein at least a portion of the password is requested by a user-allocated legitimation medium.

12. The method of claim 11 , wherein the user-allocated legitimation medium is a signature card or a USB stick.

13. The method of claim 1 , further comprising checking whether a functional connection to a central user database exists and, if so, the check of the user name, authorizations, or both, is alternatively or additionally carried out on the basis of the central user database.

14. A wind energy installation comprising:

an installation control system; and

a decoding unit connected to the installation control system,

wherein at least one of the installation control system and the decoding unit is configured to receive a requested user name and a requested password with authorizations and checking information coded therein, and

wherein the decoding unit is configured to decode the coded authorizations and checking information from the requested password, to check the requested user name on the basis of the decoded checking information, and to allow access to the installation control system depending on the result of the check of the requested user name on the basis of the decoded checking information and the decoded authorizations.

Assignments (8)