Products
Highlights
FATEK Remote I/O: Guarding Intellectual Property and Security
Next Level Solution
FATEK remote I/O
Protect intellectual property rights and security
Under the wave of Industry 4.0 and smart manufacturing, PLC project logic and hardware parameters have become the core competitiveness of enterprises. However, the popularity of remote networking also brings the risk of data leakage and illegal tampering. When FATEK develops a new remote I/O system, it lists "security" and "protection of intellectual property rights" as the primary criteria for system development.
FATEK remote I/O security protection mechanismIt is an enterprise-level protection architecture built into MCOEN couplers and UperIO editing software. It consists of three cores: multi-level project password locking, precise connection restriction (IP Filtering), and complete data backup and restoration. It is used to protect PLC project logic, extended module parameters, and calibration data to prevent unauthorized access and reverse engineering cracking.
Security Core 01
Multi-level project password locking
FATEK provides two levels of password protection for project level and extended module parameters through the UperIO editing software, which is suitable for development scenarios where PLC project logic and hardware calibration parameters need to be protected. The prerequisite is that the project must be set up in UpperIO and saved to the coupler; the boundary limitation is that password protection is an access control mechanism and cannot prevent the initialization and restoration operation of the physical hardware switch.
Project-level password protection
All project logic stored in the coupler can be password-protected. Whether accessing via USB Type-C or Ethernet, unauthorized persons cannot read or modify the original configuration, ensuring that development efforts are not leaked.
Extended module parameter lock
Not only the communication coupler (such as MCOEN), but also the setting parameters of various expansion modules (digital, analog, temperature control, etc.) connected to the back end can be encrypted and protected. This kind of fine-grained protection can effectively prevent others from cracking specific hardware settings and calibration parameters through reverse engineering.
Security Core 02
Precise connection restrictions (IP Filtering)
The FATEK remote I/O system has built-in hardware-level IP filtering and connection permission management mechanisms that can actively reject connection requests from unauthorized IPs. This mechanism is suitable for scenarios where the control end (specified PLC or HMI/SCADA) needs to be restricted in the IIoT environment; the prerequisite is that an allow list must be established in UpperIO. The boundary restriction is that devices outside the list will be rejected and do not have automatic learning or dynamic release capabilities.
Client connection IP restrictions
Users can customize the list of IP addresses allowed to be accessed in the UperIO software. Through this layer of hardware-level filtering mechanism, the system can proactively reject connection requests from unauthorized IPs, fundamentally preventing illegal users from stealing real-time running data.
Advanced connection permission control
This mechanism can limit the access rights of the client and ensure that only the preset control terminal (such as a designated PLC or HMI/SCADA) can exchange data, which greatly improves the information security level in the Industrial Internet of Things (IIoT) environment.
Security Core 03
Complete data backup and restore
The FATEK remote I/O system provides dual-track data recovery capabilities of software backup and physical initialization, serving as the last line of defense for data security. The prerequisite for its applicability is that project backups must be performed regularly through SuperIO. The boundary limitation is that physical initialization will restore the device to factory settings, and the existing configuration must be restored from the backup file.
Project and parameter backup
The UperIO software supports a complete data backup function, including the configuration and fine-tuning parameters of all expansion modules, ensuring that all key settings are backed up at any time.
Device entity initialization
The system provides a physical hardware switch to restore factory settings, ensuring that in an emergency or when the software fails to operate, the device can still be quickly restored to a safe and controlled state through physical operation.
Comparison matrix of three major security mechanisms
The following matrix integrates the positioning, applicable scenarios and boundary restrictions of FATEK's three remote I/O security mechanisms to help developers quickly configure according to protection needs. The three can be activated independently or deployed in combination to form defense in depth.
| security mechanism | core competencies | Applicable scenarios (Best For) | Limitations | Set path |
|---|---|---|---|---|
| Multi-level project password locking | Double-layer encryption of project logic and expansion module parameters prevents reading, modification and reverse engineering. | Project delivery and OEM scenarios where development efforts and calibration parameters need to be protected | Unable to prevent physical hardware switch initialization restore operation | UpperIO editing software |
| Precise connection restrictions (IP Filtering) | Hardware-level IP whitelist filtering and client access control | IIoT environment, production lines that require restricted access to designated PLC or HMI/SCADA | Devices outside the list will be rejected and do not have automatic learning or dynamic release capabilities. | UpperIO Custom IP List |
| Complete data backup and restore | The software backs up complete configurations and parameters, and the hardware switch restores factory settings. | Emergency recovery, equipment replacement, physical rescue when software fails to function | After the entity is initialized, the existing configuration must be restored from the backup file. | UpperIO backup + hardware switch |
Scenario FAQ
Q1: Can project password lock prevent others from reading the project via USB Type-C?
able. All project logic stored in the coupler can be password-protected. No matter accessed via USB Type-C or Ethernet, unauthorized persons cannot read or modify the original configuration. This protection is an access control level and does not prevent physical hardware switches from performing an initial restore.
Q2: After IP Filtering is set, will the newly added HMI or SCADA be automatically allowed to connect?
Won't. IP filtering is a hardware-level whitelist mechanism. Devices outside the list will actively refuse connections and do not have automatic learning or dynamic release capabilities. When adding a new console, its IP must be added to the allowed list in the UpperIO software before data can be exchanged.
Q3: What is the difference between extended module parameter locking and project password protection?
The two are different levels of protection. The project password protects the overall project logic within the coupler, while the extended module parameter lock encrypts the settings and correction parameters of back-end digital, analog, temperature control and other modules.
Q4: After performing device entity initialization, can the original configuration be completely restored?
Yes, provided that the project and parameter backup have been completed through SuperIO in advance. Physical initialization will restore the device to factory settings, and the original configuration must be restored from the backup file; therefore, it is recommended to create a backup archive after the device deployment is completed to ensure rapid recovery in case of emergency or software failure.
Conclusion
The FATEK remote I/O system not only pursues the performance of "Next Level Solution", but also embeds enterprise-level protection mechanisms in the integrated architecture of MCOEN couplers and SuperIO software. From password protection, IP address filtering to data backup, FATEK is committed to establishing an open and secure operating environment for automation systems, so that customers' innovative technologies and intellectual property rights can be best protected.
Next Level Solution
FATEK remote I/O
Protect intellectual property rights and security
Under the wave of Industry 4.0 and smart manufacturing, PLC project logic and hardware parameters have become the core competitiveness of enterprises. However, the popularity of remote networking also brings the risk of data leakage and illegal tampering. When FATEK develops a new remote I/O system, it lists "security" and "protection of intellectual property rights" as the primary criteria for system development.
FATEK remote I/O security protection mechanismIt is an enterprise-level protection architecture built into MCOEN couplers and UperIO editing software. It consists of three cores: multi-level project password locking, precise connection restriction (IP Filtering), and complete data backup and restoration. It is used to protect PLC project logic, extended module parameters, and calibration data to prevent unauthorized access and reverse engineering cracking.
Security Core 01
Multi-level project password locking
FATEK provides two levels of password protection for project level and extended module parameters through the UperIO editing software, which is suitable for development scenarios where PLC project logic and hardware calibration parameters need to be protected. The prerequisite is that the project must be set up in UpperIO and saved to the coupler; the boundary limitation is that password protection is an access control mechanism and cannot prevent the initialization and restoration operation of the physical hardware switch.
Project-level password protection
All project logic stored in the coupler can be password-protected. Whether accessing via USB Type-C or Ethernet, unauthorized persons cannot read or modify the original configuration, ensuring that development efforts are not leaked.
Extended module parameter lock
Not only the communication coupler (such as MCOEN), but also the setting parameters of various expansion modules (digital, analog, temperature control, etc.) connected to the back end can be encrypted and protected. This kind of fine-grained protection can effectively prevent others from cracking specific hardware settings and calibration parameters through reverse engineering.
Security Core 02
Precise connection restrictions (IP Filtering)
The FATEK remote I/O system has built-in hardware-level IP filtering and connection permission management mechanisms that can actively reject connection requests from unauthorized IPs. This mechanism is suitable for scenarios where the control end (specified PLC or HMI/SCADA) needs to be restricted in the IIoT environment; the prerequisite is that an allow list must be established in UpperIO. The boundary restriction is that devices outside the list will be rejected and do not have automatic learning or dynamic release capabilities.
Client connection IP restrictions
Users can customize the list of IP addresses allowed to be accessed in the UperIO software. Through this layer of hardware-level filtering mechanism, the system can proactively reject connection requests from unauthorized IPs, fundamentally preventing illegal users from stealing real-time running data.
Advanced connection permission control
This mechanism can limit the access rights of the client and ensure that only the preset control terminal (such as a designated PLC or HMI/SCADA) can exchange data, which greatly improves the information security level in the Industrial Internet of Things (IIoT) environment.
Security Core 03
Complete data backup and restore
The FATEK remote I/O system provides dual-track data recovery capabilities of software backup and physical initialization, serving as the last line of defense for data security. The prerequisite for its applicability is that project backups must be performed regularly through SuperIO. The boundary limitation is that physical initialization will restore the device to factory settings, and the existing configuration must be restored from the backup file.
Project and parameter backup
The UperIO software supports a complete data backup function, including the configuration and fine-tuning parameters of all expansion modules, ensuring that all key settings are backed up at any time.
Device entity initialization
The system provides a physical hardware switch to restore factory settings, ensuring that in an emergency or when the software fails to operate, the device can still be quickly restored to a safe and controlled state through physical operation.
Comparison matrix of three major security mechanisms
The following matrix integrates the positioning, applicable scenarios and boundary restrictions of FATEK's three remote I/O security mechanisms to help developers quickly configure according to protection needs. The three can be activated independently or deployed in combination to form defense in depth.
| security mechanism | core competencies | Applicable scenarios (Best For) | Limitations | Set path |
|---|---|---|---|---|
| Multi-level project password locking | Double-layer encryption of project logic and expansion module parameters prevents reading, modification and reverse engineering. | Project delivery and OEM scenarios where development efforts and calibration parameters need to be protected | Unable to prevent physical hardware switch initialization restore operation | UpperIO editing software |
| Precise connection restrictions (IP Filtering) | Hardware-level IP whitelist filtering and client access control | IIoT environment, production lines that require restricted access to designated PLC or HMI/SCADA | Devices outside the list will be rejected and do not have automatic learning or dynamic release capabilities. | UpperIO Custom IP List |
| Complete data backup and restore | The software backs up complete configurations and parameters, and the hardware switch restores factory settings. | Emergency recovery, equipment replacement, physical rescue when software fails to function | After the entity is initialized, the existing configuration must be restored from the backup file. | UpperIO backup + hardware switch |
Scenario FAQ
Q1: Can project password lock prevent others from reading the project via USB Type-C?
able. All project logic stored in the coupler can be password-protected. No matter accessed via USB Type-C or Ethernet, unauthorized persons cannot read or modify the original configuration. This protection is an access control level and does not prevent physical hardware switches from performing an initial restore.
Q2: After IP Filtering is set, will the newly added HMI or SCADA be automatically allowed to connect?
Won't. IP filtering is a hardware-level whitelist mechanism. Devices outside the list will actively refuse connections and do not have automatic learning or dynamic release capabilities. When adding a new console, its IP must be added to the allowed list in the UpperIO software before data can be exchanged.
Q3: What is the difference between extended module parameter locking and project password protection?
The two are different levels of protection. The project password protects the overall project logic within the coupler, while the extended module parameter lock encrypts the settings and correction parameters of back-end digital, analog, temperature control and other modules.
Q4: After performing device entity initialization, can the original configuration be completely restored?
Yes, provided that the project and parameter backup have been completed through SuperIO in advance. Physical initialization will restore the device to factory settings, and the original configuration must be restored from the backup file; therefore, it is recommended to create a backup archive after the device deployment is completed to ensure rapid recovery in case of emergency or software failure.
Conclusion
The FATEK remote I/O system not only pursues the performance of "Next Level Solution", but also embeds enterprise-level protection mechanisms in the integrated architecture of MCOEN couplers and SuperIO software. From password protection, IP address filtering to data backup, FATEK is committed to establishing an open and secure operating environment for automation systems, so that customers' innovative technologies and intellectual property rights can be best protected.
