How Maple Systems HMIs protect industrial automation projects

Protect HMI from unauthorized access

First and foremost, Maple Systems HMIs let you protect your HMI data with extensive password control. You can restrict access to the HMI’s local setup menus with a password and require authentication before uploading or downloading new projects. Passwords also secure stored data within the HMI and control access from connected devices such as PCs, other HMIs, or smart devices.

Protected and secure remote access

Using EasyAccess2.0, remote PCs with an Internet connection can communicate to Maple HMIs for screen monitoring or to change settings on the HMI or connected PLC, lowering the cost of screen updates and minimizing down time. It is of paramount importance that this connection be secure. This is why Maple Systems employs a VPN (Virtual Private Network) connection and SSL encryption for remote communication. Wi-Fi access to select Maple HMIs using cMT Viewer is also password-protected. With the press of a button on the HMI, remote access can be temporarily disabled.

Secure Password Authentication (SPA) is also an important factor when sending predefined email messages from HMIs that contain sensitive data or information about an alarm event. The email function employs the SMTP protocol with the option for encrypting login credentials using SSL or TLS.

Many of our HMIs include two Ethernet ports which provide a physical separation between your local network and the web. Also, our HMI series uses a proprietary operating system that further reduces susceptibility to viruses or malware.

Role-based user permissions

Maple Systems HMIs give administrators full control over who can view or interact with specific screens, data objects, or input elements such as buttons and data entry fields. When access is restricted, the HMI either hides the object or displays an “Access Denied” warning to unauthorized users.

Administrators can assign permissions for up to 12 users or 128 when using a USB Security Key, each with a unique username and alphanumeric password. During runtime, administrators can easily add, delete, or modify user accounts and update permissions directly from the HMI interface.

Safety comes first

Security is essential, but it’s equally important to operate each HMI in a safe environment. Operators can temporarily take any HMI offline at the press of a button using the interlock feature, which monitors the status of a safety bit when activating potentially dangerous equipment.

Other safety functions let you set a minimum press time before a button activates or display a confirmation window before an action proceeds. The Operation Log records every operator action, helping teams identify incorrect sequences and reinforce proper HMI procedures.

Enhanced security features

Manage access to your control system and keep your facility safe. Our configuration software offers enhanced operational security features to prevent unauthorized personnel from accessing windows in the HMI or from operating critical functions including:

• Projects
• Screens
• Objects
• Adding/deleting accounts
• Modifying privileges
• Resetting passwords
• And more

Alphanumeric usernames and passwords

User authentication is a key part of any secure automation system. Maple Systems HMIs let you manage user access with customizable alphanumeric usernames and passwords, giving administrators precise control over who can view or modify specific screens and settings.

• Identify users by name or functions using alphanumeric characters
• Longer alphanumeric login passwords, of up to 32 characters in length, provide a higher level of security

Add/Delete users at any time

Flexibility in user management ensures your project can adapt to changes without compromising security. With Maple Systems HMIs, administrators can easily add, remove, or update user accounts as needed.

• Grant access to as many as 128 users, each with a unique password
• Add temporary users for a specific period when short-term access is needed
• Add or delete usernames and passwords directly on the HMI screen, or manage them from a USB flash drive or SD card using a Function Key

USB security key login

For projects that require quick and secure authentication, Maple Systems HMIs support USB Security Key login. This feature streamlines the process of granting user access without the need to manually enter credentials.

Users can store their login information on a USB flash drive and simply insert it into the HMI to authenticate. When combined with a Function Key, the system automatically logs the user in, which helps saving time while maintaining strong access control.

Project protection

Maple Systems HMIs include multiple layers of project protection to safeguard your configurations, code, and intellectual property. These features help ensure that only authorized users can modify or deploy projects, keeping your system secure from accidental or intentional tampering.

• Project Password Feature: Secures a project and prevents it from being modified without the proper password
• Project Protection Feature: Sets a unique password (Project Key) in the project that will cause the project to run only on specific HMIs that have a matching password (HMI Key)
• Disable Upload Function Feature: Disables the upload function, preventing a project from being uploaded from your HMI
• Decompiling Prohibited Feature: Prevents decompiling of a project
• XOB Password Feature: Allows you to set a password when compiling your project to prevent unauthorized decompiling

Operational security

Operational security ensures that your HMI system remains protected during day-to-day use. Maple Systems provides a range of options that help administrators define user privileges, monitor activity, and restrict access to critical functions without slowing down productivity.

• Password Protection: Stops unauthorized entries into your HMI application
• Security Levels: Provide up to 12 levels of security for various levels of access to critical functions. An “Access Denied” message can be configured to pop-up if an attempt is made to access a function without the correct security level
• Object Level Security: Apply object level security so only certain users can have access to the function of an object
• Object Security Disabled: An object’s security can be disabled after activation/use
• Object Warning Message: Displays a warning message if access to an object is denied
• Object Invisibility: Set objects to turn invisible while protected
• Window Access: Limits access to pop-up windows and screens, etc
• Interlock Function: Control the visibility and functionality of buttons, switches, and displays under PLC control
• Monitor User Actions:Record HMI input (such as the press of a function key/switch, changing screens, or data entry) or actions taken by the HMI operator along with date and time of each action, current security level, and the specific data that was entered. This action log can be viewed on the HMI or stored in an SQLite database file. This feature enhances security and helps to determine the sequence of events which may have led to an operational error
• Additional Features: Sound output for alarms and auto logout

Secure remote access

Remote connectivity plays a vital role in modern industrial automation. Maple Systems HMIs include built-in tools that keep remote access both convenient and secure. These features allow authorized users to monitor, control, and troubleshoot systems from anywhere.

• EasyAccess2.0: This feature provides a secure encrypted connection to your HMI from remote PCs or smart devices. A VPN (Virtual Private Network) connection encrypted with SSL (Secure Sockets Layer) helps block unauthorized access to your HMI. The domain administrator controls this optional feature and can restrict access to specific users and HMIs.
• cMT Viewer: Provides password-protected remote control and monitoring of select Maple HMIs.
• Email Protection: The HMI sends predefined alarm messages to designated recipients by email whenever a trigger condition occurs. Using the SMTP protocol, it supports SPA (Secure Password Authentication) and authenticates to mail servers through SSL or TLS.
• Hardware Protection: In addition to the software features above, many Maple Systems HMIs have two Ethernet ports to allow physical separation between the control system (internal network) and the outside (corporate) network. And finally, Maple Systems HMIs use a proprietary operating system, further protecting the HMI from risk of infection by viruses or malware that are common to Windows-based platforms.