US 10,320,747 B2Granted

Automation network and method for monitoring the security of the transfer of data packets

AssigneeSiemens Aktiengesellschaft

InventorAnna Palmin

Life of this patent

Estimating the term…

Loading patent…

Abstract

An automation network for monitoring the security of a transfer of data packets includes a first processing device configured to transfer a data packet from an installation component and to the installation component, and a second data processing device which is bidirectionally connected to the first data processing device. The second data processing device generates at least one response packet, when detecting a transmission of the data packet from the first data processing device, and sends the at least one response packet back to the first data processing device. The first data processing device includes a response filter which is configured to execute a check and subsequent rejection/acceptance of the at least one response packet.

Claims18

Dependent claims

An industrial automation network for monitoring the security of a transfer of data packets, comprising:

a first processing device configured to transfer a data packet from an plant component and to the plant component;
and
a second data processing device bidirectionally connected to the first data processing device, said second data processing device configured to generate at least one response packet, when detecting a transmission of the data packet from the first data processing device, and to send the at least one response packet back to the first data processing device;
said first data processing device including a response filter which is configured to execute a check and subsequent rejection/acceptance of the at least one response packet;
wherein the industrial automation network is a network selected from a control automation installation network, a production automation installation network, a manufacturing automation installation, and any combination thereof;
and
wherein the plant component comprise at least one input and/or output facility which can detect process parameters and/or can output corresponding actuating signals.

4 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/216,394Filed 21 Jul 2016
Priority: EP 1517782422 Jul 2015
Published: US 2017/0026341 A126 Jan 2017
Granted: 11 Jun 2019
Term ends: Not estimatedThe source records don’t support an estimate.

Classification7 codes

H04L 63/0236
Filtering policies: filtering by address, protocol, port number or service, e.g. IP-address or URL
H04L 63/02
Network architectures or network communication protocols for network security: for separating internal from external traffic, e.g. firewalls
H04L 63/1408
For detecting or protecting against malicious traffic: by monitoring network traffic
H04L 63/166
Implementing security features at a particular protocol layer: at the transport layer

Family

US 2017/0026341 A1Pre-grant publication · published 26 Jan 2017
US 10,320,747 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key