Cross security layer secure communication
AssigneeHoneywell International Inc.
InventorsVenkata Rao Venkamsetty, Boyd Knutson, Kishen Manjunath, Karthick Sengodan, Thangadurai Narayanan, Blaine Brysh
Life of this patent
Estimating the term…
Abstract
A security layer in an industrial control and automation system includes a user database, a web server, a secure token server (STS), and an application server. The user database is configured to store identities of users with credentials to access controls of the security layer. The web server is configured to identify an operator using a client device. The STS is configured to authenticate the operator for the security layer. The application server is configured to negotiate access for the client device for a target application server in a target security layer.
Claims17
A security layer in an industrial control and automation system comprising:
- a user database configured to store identities of users with credentials to access one or more controllers in a target security layer;
- a web server configured to identify an operator using a client device;
- a secure token server (STS) configured to authenticate the operator for accessing a target application server in the target security layer;
- a target secure token server (STS) configured to validate the operator for accessing the target security layer, and
- an application server configured to:
- negotiate access for the client device for a target application server in a target security layer;
- provide an access token received from the web server to a target STS located in the target security layer;
- and
- receive a target access token from the target STS, wherein the target access token comprises information that authenticates the client device to access the target security layer and allowing the operator on a client device to access the controller of the target security layer.
An industrial control and automation system comprising:
- a target security layer comprising a target secure token server (STS) and a target application server;
- and
- a security layer comprising:
- a user database configured to store identities of users with credentials to access controllers in a target security layer;
- a web server configured to identify an operator using a client device;
- an STS configured to authenticate the operator for accessing a target application server in the target security layer;
- a target secure token server (STS) configured to validate the operator for accessing the target security layer, and
- an application server configured to negotiate:
- negotiate access for the client device for a target application server in a target security layer;
- provide an access token received from the web server to a target STS located in the target security layer;
- and
- receive a target access token from the target STS, wherein the target access token comprises information that authenticates the client device to access the target security layer.
A method for secure communication across security layers, the method comprising:
- identifying, using a web server, an operator using a client device to access a target controller in a target security layer;
- authenticating, using a secure token server (STS), an operator of the client device for accessing a target application server in the target security layer;
- negotiating, using an application server, access for the client device for the target application server in the target security layer
- providing an access token received from the web server to a target STS located in the target security layer;
- and
- receiving a target access token from the target STS, wherein the target access token comprises information that authenticates the client device to access the target security layer and allowing the operator on a client device to access the controller of the target security layer.
Dependencies are inferred from the claim text.