Know-How Protection - Siemens SIMATIC S7-1500 System Manual

11.7

Know-how protection

Application
You can use know-how protection to protect one or more OB, FB or FC blocks as well as
global data blocks in your program from unauthorized access. To restrict access to a block,
assign a password. The password offers high-level protection against unauthorized reading
and manipulation of the block. Know-how protection does not involve the CPU (offline access
in STEP 7).
Password provider
As an alternative to manual password input, you can assign a password provider to STEP 7.
When using a password provider, you select a password from a list of available passwords.
When a protected block is opened, STEP 7 connects to the password provider and retrieves
the corresponding password.
You need to install and activate a password provider before you can connect it. A settings file
in which you define the use of a password provider is also required.
A password provider offers the following advantages:
• The password provider defines and manages the passwords. When know-how protected
blocks are opened, you work with symbolic names for passwords. For example, a
password is marked with the symbolic name "Machine_1" in the password provider. The
actual password behind "Machine1" is not disclosed to you.
A password provider therefore offers optimum block protection as the users do not know
the password themselves.
• STEP 7 automatically opens know-how protected blocks without the direct entry of a
password. This saves you time.
You can find more information on connecting a password provider in the STEP 7 online help.
Readable data
If a block is know-how protected, only the following data is readable without the correct
password:
• Block title, comments and block properties
• Block parameters (INPUT, OUTPUT, IN, OUT, RETURN)
• Call structure of the program
• Global tags without information on the point of use
S7-1500R/H redundant system
System Manual, 01/2024, A5E41814787-AF
Protection
11.7 Know-how protection
355