iOS 应用程序中的身份验证方法
我正在为客户端开发一个 iOS 应用程序，通过 TCP/IP 读取 PLC 控制器数据。 PLC 设备没有任何方法来验证用户身份。所以基本上，如果您知道自己在寻找什么，就在网上；如果需要，您可以读取数据并写入寄存器。这个应用程序的目标是允许在应用程序中进行某种许可或身份验证。例子。所述设备的工程师有权限访问寄存器，但维护人员只有只读权限。无法向 LAN 上的 PLC 设备添加身份验证方法。我需要想出一种通过应用程序来完成此操作的方法。
有什么建议吗？
需要记住的事情...
1：这些 PLC 设备通常不在可以访问互联网的 LAN 上。
2：iPAD/iPhone 通常无法访问互联网进行任何类型的基于 Web 的身份验证。
3：此应用程序还需要在Android上开发，因此身份验证需要跨平台兼容。
4：来自不同公司的不同客户将需要能够“调整”和“定制”用户权限。
如果我需要澄清任何事情，请告诉我。谢谢！
I'm developing an iOS application for a client that reads PLC controller data via TCP/IP. The PLC devices don't have any method to authenticate a user..so basically if you know what your looking for, are on net; you have the ability to read the data and write to the registers if you want to. Well the goal with this application is to allow for some sort of Permission or authentication in the app. Example. The engineer of said devices has the ability to right to the registers but a maintenance worker only has read only permissions. There is no way of adding a authentication method to the PLC devices sitting on the LAN. I need to come up with a way of doing it through the app.
Any suggestions?
Things to keep in mind...
1: More often than not these PLC devices are NOT on a LAN that has access to the internet.
2: More often than not the iPAD/iPhone will not be able to get to the internet for any sort of web based authentication.
3: This app will also need to be developed on the Android so the authentication will need to be cross platform compatible.
4: Different clients from different companies will need the ability to "adjust" and "customize" a users permissions.
Let me know if I need to clarify anything. Thanks!
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
Allen Bradley 已经为他们的 PLC 创建了一个非常相似的软件平台，称为 Assetcentre for OC。我建议您仔细阅读他们的文档以了解他们的架构。在他们的软件系统中，第一步是删除所有 PC 上的 PLC 通信软件，并强制它们通过特殊的“网关”网络版本进行连接，该版本既处理身份验证/安全性，又进行实际的 PC→PLC 通信。
对于“未连接”模式，PC“借用”许可证（下载安全配置文件），该许可证具有到期日期，以便文件“到期”。
显然，任何在工厂里拥有“流氓”电脑的人都可以通过回到他们以前的做法来绕过所有这些。
Allen Bradley has already created a very similar software platform for their PLC's called Assetcentre for OC's. I suggest you read their documentation carefully to udnerstand their architecture. In their software system the first step is to delete the PLC communications software off all the PC's and force them to connect via a special "gateway" networked version which both handles authentication/security and does the actual PC<-->PLC communication.
For "unconnected" mode, a PC "borrows" a license (downloads the security profile) which has an expiration date in it so that the file "expires".
Obviously anyone with a "rogue" PC in the plant can bypass all of this by going back to the way they used to do it.