June 26, 2019, 06:28:46 PM
Robotforum | Industrial Robots Community

 Fanuc Security Access with an ID badge

normal_post Author Topic:  Fanuc Security Access with an ID badge  (Read 560 times)

0 Members and 1 Guest are viewing this topic.

May 17, 2019, 02:27:46 PM
Read 560 times
Offline

Leonidas


I am trying to restrict access to several Fanuc (R-30iA) teach pendants.
I have the password option loaded onto the controllers. i have read the manual on the password setup. But what i'm trying to do is grant access with a badge scan instead of a password or an usb drive. We already have these badge scanners on alot of our machines so management is determined to use them for this function

This is a P-50iB running PaintTool and has the symbolic teach pendant. mainly I just want to restrict the Presets(Data Key) and of course the TouchUp function. But I wouldn't mind restricting everything if I have to. Due to certain safety issues, we need zero access granted to operators and those not authorized. So i'm looking for variables that can achieve this and I can just turn the variables on through BG Logic once the badge scan is accepted through the PLC. I've talked to the CRC at Fanuc but they said they dont know of a "disable editing" variable. After reading many threads here on RobotForum, I see that certain variables are very elusive and restricting access to certain keys has to be written out in the .xml file in the password configuration setup. That is fine. But I dont think I can write the setup file and then "access" it with a badge scan like I could with the actual password login.

So, I believe i would have to try to restricts what I can in the system variables and then turn those variables on and off with the BGLogic.
Ive "heard" of people restricting the editing through a variable. But have yet to "see" it. I know a lot of knowledge is here so I decided to ask if anyone here has any idea on how to achieve this.  I want to use the password option, but instead of a password or an usb,  I want to use an employee ID badge scan. The goal is only grant "editing" abilities to those with the correct badge

Today at 06:28:46 PM
Reply #1

Advertisement

Guest

May 17, 2019, 04:17:02 PM
Reply #1
Online

Robo_Eng_13


Before you give up on passwords, take a look at section 5.9.11 for the Password Auto Login Function. My understanding is that it can be used to effectively log in based on a PLC input, which can then be controlled by your badge system. You would use Explicit Messaging or BG Logic to write the value of the system variable references in _AUTOLOGIN_3

May 17, 2019, 07:13:44 PM
Reply #2
Offline

Leonidas


I dont believe i see that. in my manual, it discusses the _AUTOLOGIN_ function but i dont see how its related to an input from the PLC.

the way I'm reading the Autologin section, is to set the UserName of the INSTALL level to AUTOLOGIN_0,1,or2. Then that allows you to use the teach pendant just like you would if the password is not even on the teach pendant? I guess i dont understand it.

Yes, i want to send an input from the PLC, then that input would release the teach pendant for use. It may be the AUTOLGIN but i dont  understand it.

The only variable i see called $AUTOLOGIN is number 16 under the $PASSWORD system variable. I can just set it to true or false. i need an enable variable somehow to go true when input is sent from PLC

thanks for your response

May 17, 2019, 07:40:44 PM
Reply #3
Online

Robo_Eng_13


You would set the user name of your Install user to be the AUTOLOGIN_3 user, then you would have a BG Logic program setting $PASSWORD.$AUTOLOGIN = a digital input, which would be controlled by the PLC.

May 17, 2019, 08:09:08 PM
Reply #4
Offline

Leonidas


I believe i understand that.

So if the DI was on that would translate to true on the variable, and if the DI was off that would translate to false on that variable?

Thank you so much for your help. i'm going to try it very soon and i will let you know.

May 17, 2019, 08:20:27 PM
Reply #5
Online

Robo_Eng_13


That is my understanding. In AUTOLOGIN_3, you are logged in if the variable is TRUE, and logged out if the variable is FALSE. Setting it to 1 or 0 SHOULD work, if not you can add the small amount of complexity that If DI[345] = ON, then Var = True.

June 14, 2019, 08:09:23 PM
Reply #6
Offline

Leonidas


I have setup up the _AUTOLOGIN_3 as the INSTALL user. My manual never mentioned _AUTOLOGIN_3......Just  _AUTOLOGIN_0, AUTOLOGIN_1, and AUTOLOGIN_2. But you were right. I can 'auto login' and 'auto logout' by turning on a input from the PLC now. I cant however with ALogin0,1,or 2.
However, I still have issues. When the TP is logged out. It is not at the operator level. Its at the INSTALL level. Full access. I noticed when I monitor the system variable $PASSWORD.$CURR_LEVEL and auto logged in and out, I saw the levels swap back and forth from a 0 (operator level) to an 8 (INSTALL level), but it was doing it on user two, not one. This may be my problem. So when I'm logged out, user 1 shows an 8 and user 2 shows a 0. Its like i havent enabled the password function.

I created a plain jane user name and password and assigned it level 3. So when i log in under that user with a typed in password, i get restricted to level 3. But when i log out, the TP is no longer restricted. In this situation, the plain jane is user two( not user one like AUTOLOGIN_3 ) and yet still under $PASSWORD.$CURR_LEVEL is see the number toggle from 3 to 8 in the same user two slot.

So I believe I'm missing something. I did all this work with the robot in production so I never cycled power. But its doing the opposite of what I want it to do. Its not logging out to the operator level. Rather to the install level.

Any thoughts would be greatly appreciated

Today at 06:28:46 PM
Reply #7

Advertisement

Guest

June 17, 2019, 03:29:40 PM
Reply #7
Online

Robo_Eng_13


I will have to look into it. I am not sure what the solution is.

June 18, 2019, 08:10:10 PM
Reply #8
Offline

Leonidas


It may be working correctly.

I can Auto Log in and out but when its logged out i want that current level to say Operator,
or on my old V7.7 R-30ia PaintTool say level three.

Instead it says nobody is logged in and the current level is TP Disabled. i dont know what that means. There's

im just not restricted when its logged out. I can simulate inputs, change presets, registers. All that I want to restrict when its logged out

I appreciate your replies

June 18, 2019, 08:32:26 PM
Reply #9
Online

Robo_Eng_13


Have you encountered anything you cannot do while logged out? It may just be that your password levels are set up to be too lenient at the operator level. Try touching up a point or adding/deleting a line while in the logged out state. If there is anything you can't do, then it would appear to be working.

I have never had any interaction with User 1 vs User 2. That is very strange. If i find anything, i will report back here.

June 18, 2019, 08:44:20 PM
Reply #10
Offline

Leonidas



I cant get this robot to stop to check any more advanced function restrictions.  maybe i can get it this afternoon for more testing.
i really appreciate your reply.

if my operator level is too lenient  is there any thing I could do?

Our problem is not with so much program point changes, but rather fluid flow presets as the operators adjust them to compensate for a clogged nozzle

if i wrote a configuration file for the "operator" level does it override the default settings? So it would log out to "my" config. file instead of the default settings already there

When i log in at level three I cant do anything but navigate. Perfect. But when it logs out, I'm free to make changes.

I'll check more when I can get access to this robot


June 18, 2019, 09:25:33 PM
Reply #11
Offline

Leonidas


i can still touch up a point in existing programs when I'm logged out.

I did notice i lost the ability to abort all under the function tab when logged out. i got it back when logged in. So, its probably working somewhat.

This is terrible. There must be something I'm doing wrong. No way they would operate a Password protection like this........

I guess I'll try the configuration file next

June 19, 2019, 01:35:39 PM
Reply #12
Online

Robo_Eng_13


Yes, you can create an XML file which will specify what each password level is and is not able to do. This will overwrite the existing defaults.

At least with the normal password operation, logging in will put you at the level you logged in at, and logging out will put you at Operator level, not install. It is very odd to me that it would do that for you. If logging out is giving you full access, but logging in is putting you in a specific limited password log in level, maybe you could reverse it? By default you are logged in to a limited account, then a badge swipe would log you out to Install? Dangerous, but a possible work around.

I haven't had any time to look into how User 1/ User 2 might factor in to this.

June 19, 2019, 03:27:22 PM
Reply #13
Offline

Leonidas


I wrote the config file. Now when its logged out it shows OPERATOR ( Not TP Disabled )as the current level and is restricted. Perfect.

Thanks again for your help with the _AUTOLOGIN_3. I'm logging in now with a bit fill to a group output from the PLC. And when logged out, my config file restricts the pendant

Today at 06:28:46 PM
Reply #14

Advertisement

Guest

June 19, 2019, 05:33:13 PM
Reply #14
Online

Robo_Eng_13


Excellent! I am glad you got it working! Now, the next step I want is for one signal from the PLC to change which level you get logged in as, then a second signal to preform the login. That way you can assign different people to different levels of access.


Share via facebook Share via linkedin Share via pinterest Share via reddit Share via twitter

xx
Need to implement Security on Fanuc Robot

Started by davidoeser on Fanuc Robot Forum

12 Replies
13390 Views
Last post May 30, 2019, 06:51:22 PM
by bidzej
xx
Access Sony XC-56 camera on Fanuc robot using ROS

Started by razerblade on Fanuc Robot Forum

0 Replies
363 Views
Last post October 25, 2018, 04:52:57 PM
by razerblade
xx
M-1iA-Security entries

Started by azfboom on Fanuc Robot Forum

1 Replies
2013 Views
Last post September 30, 2014, 02:55:28 PM
by Lerak
xx
Security with RJ controller

Started by ArcMan on Fanuc Robot Forum

0 Replies
1514 Views
Last post February 13, 2014, 01:46:58 PM
by ArcMan