Pilz PITreader - 5.2.1 Transponder data; 5.2.1.1 Device groups

Function description
Operating Manual PITreader, PITreader Firmware V1.5.x
1004806-EN-08
| 15
5.2.1 Transponder data
In transponder data authentication mode, a user can authenticate himself on a safe evalu-
ation unit (e.g. PIT m4SEU) and the connected control system by inserting a transponder
key into the read area of the PITreader. Authentication is carried out using the permissions
stored on the transponder key.
Safe operating mode selection can be implemented via a safe evaluation unit (e.g.
PITm4SEU) (only with PITreader base unit).
A controller (PLC, HMI) can use Modbus/TCP to read the transponder key that is currently
authenticated.
INFORMATION
Please note that in transponder data authentication mode, authentication
depends solely on possession of the transponder key. Loss of a transpon-
der key can therefore lead to a security risk.
We recommend that you enter the security IDs of all the published
transponder keys in a list, so that they can be transferred into the Block
list [ 26] if they are lost.
5.2.1.1 Device groups
There are 32 selectable device groups, G0 to G31.
PITreader devices are combined within a device group. One user (one transponder key)
has the same permission on all PITreader devices within a group. Another user can have a
different permission. Device groups can be used for a machine type, for example (in this
case a user has the same permission on all turning machines, for example), see also Set
device group [ 37].
One permission can be stored on a transponder key per device group.
Each device group can have up to 65 different permissions.
} 0: No permission
} 1 to 64: Permission 1 to 64
For example a permission may relate to the enabling of functions, which can be assigned
based on the level of training.
Permissions are code words for failsafe communication with a guaranteed minimum ham-
ming distance. An overview of the code words for the permissions can be found under
Overview of permissions [ 54].
Only one permission at a time is valid in the PITreader. Additional permissions stored on
the transponder key can be called up via the Modbus/TCP interface of the PITreader and if
necessary can be used for customer-specific purposes.