Machine operator permissions
under control.

Who may operate this machine? Is their training still valid? When an employee taps their card, ChipLogin checks their permissions and sends the result to the machine control system. It also records the verification.

An operator tapping a card at the control panel of an injection molding machine

Where this actually gets used on the floor

Shared employee management

Machine permissions can use the same employee records as other access managed in ChipLogin.

An overview of granted and denied access

Find out whose card was used, when and at which machine.

Machinery Regulation (EU) 2023/1230

The Regulation may create traceability and record-keeping requirements for relevant safety-related software changes. Applicability, retention periods, and the evidence required must be assessed for the specific machine and role; ChipLogin provides identity and event records, not legal compliance by itself.

Permissions based on valid training

Decisions follow the operator rules you set. How the verification result is used depends on integration with the machine control system.

Information for your technical team

Connects to the machine control system. ChipLogin checks operator permissions; it does not replace machine functional safety or safety circuits.

1

Reader at the machine

A compact card reader, mounted on the machine's control panel.

2

Control module in the cabinet

Installed in the machine's control cabinet. Holds an encrypted connection (mTLS) to ChipLogin Server and evaluates authorization.

3

The PLC gets the result

Authorization and operator identity land directly in process data — over EtherCAT or Modbus TCP.

And why it works reliably even without a network connection:

Local, signed policy

ChipLogin for machines stores a cryptographically signed qualification matrix locally — who is trained for which tasks, and until when. It checks permissions without contacting the server for every card tap.

The network is never in the critical path

Rule updates and audit synchronisation run in the background over mTLS. During a network outage, known, trained operators can be authorised using locally stored rules. The exact behaviour depends on the installation.

One card, separate rules for each access point

Employees can use the same card at a computer and a machine. Permissions are checked against the rules set for each device.

A complete audit trail

Each record includes the assigned employee, time, machine and verification result. You can review both granted and denied access during an internal check.

Speaks the protocol your PLC already speaks

One base device with a swappable communication module, configured for the supported industrial interface required by the deployment. Confirm the required bus, module status, and certification needs with us before specifying the system.

PROFINET

EtherCAT

EtherNet/IP

Modbus TCP / RTU

IO-Link

CANopen / Profibus (legacy)

Hardware

A setup for one machine: a control module in the cabinet and a reader at the control panel.

Control module

A unit for the control cabinet. Holds an encrypted connection to ChipLogin Server, evaluates operator authorization, and passes the PLC the result directly in process data.

mounting: 35 mm DIN rail · bus: EtherCAT / Modbus TCP · server: Ethernet, mTLS

Reader

A compact card reader for the machine's control panel. Signals status to the operator and passes the read to the control module.

cards: 13.56 MHz · mounting: at the control panel · connection: to the control module

Discuss ChipLogin for Machines

Tell us how you currently manage machine operator permissions. You do not need technical specifications to start. If you have documentation, have it ready; we will work through the details with you.

Contact directly

Jakub Skoumal · Sales

or use the form below ↓

Please enter your name
Please enter a valid email
Please enter a message

By submitting, you agree to our privacy policy.

Thank you. We have received your message.

We will get in touch to discuss the next steps.