US 10,855,448 B2Granted

Apparatus and method for using blockchains to establish trust between nodes in industrial control systems or other systems

AssigneeHoneywell International Inc.

InventorsKevin McMurdie, Ganesh P. Gadhe

Life of this patent

Estimating the term…

Loading patent…

Abstract

An apparatus includes at least one processor configured to determine whether a blockchain identifies a valid smart contract indicating that communication with a specified node is permitted. In response to determining that the blockchain does identify the valid smart contract, the at least one processor is configured to establish a secure communication session with the specified node. In response to determining that the blockchain does not identify the valid smart contract, the at least one processor is configured to generate a new smart contract associated with the specified node, establish the secure communication session with the specified node in response to user approval of the new smart contract, and not establish the secure communication session with the specified node in response to user rejection of the new smart contract.

Claims14

Dependent claims

An apparatus for using blockchains to establish trust between nodes in an industrial control system comprising:

at least one processor and a memory storing a blockchain configured to:
determine whether the blockchain identifies a valid smart contract indicating that communication with a specified node is permitted;
in response to determining that the blockchain does identify the valid smart contract, establish a secure communication session with the specified node;
and
in response to determining that the blockchain does not identify the valid smart contract:
generate a new smart contract associated with the specified node;
in response to user approval of the new smart contract, establish the secure communication session with the specified node, wherein the at least one processor is further configured to:
access a copy of the blockchain in the memory to determine whether the blockchain identifies the valid smart contract;
generate an update to the blockchain and updating the copy of the blockchain in the memory using the update, the update identifying the new smart contract;
and
publish the updated blockchain to one or more nodes for updating one or more additional copies of the blockchain;
and
in response to user rejection of the new smart contract, not establish the secure communication session with the specified node.

10 more elements

A non-transitory computer readable medium containing instructions, for using blockchains to establish trust between nodes in industrial control systems, that when executed cause at least one processor using a memory storing a blockchain to:

determine whether the blockchain identifies a valid smart contract indicating that communication with a specified node is permitted;
in response to determining that the blockchain does identify the valid smart contract, establish a secure communication session with the specified node;
and
in response to determining that the blockchain does not identify the valid smart contract:
generate a new smart contract associated with the specified node;
in response to user approval of the new smart contract, establish the secure communication session with the specified node, wherein the at least one processor is further configured to:
access a copy of the blockchain in the memory to determine whether the blockchain identifies the valid smart contract;
generate an update to the blockchain and updating the copy of the blockchain in the memory using the update, the update identifying the new smart contract;
and
publish the updated blockchain to one or more nodes for updating one or more additional copies of the blockchain;
and
in response to user rejection of the new smart contract, not establish the secure communication session with the specified node.

9 more elements

A method for using blockchains to establish trust between nodes in industrial control systems comprising:

determining, by at least one processor, whether a blockchain identifies a valid smart contract indicating that communication with a specified node is permitted;
in response to determining that the blockchain does identify the valid smart contract, establishing a secure communication session with the specified node;
and
in response to determining that the blockchain does not identify the valid smart contract:
generating a new smart contract associated with the specified node;
in response to user approval of the new smart contract, establishing the secure communication session with the specified node, wherein in response to the user approval of the new smart contract:
accessing a copy of the blockchain in a memory storing the blockchain to determine whether the blockchain identifies the valid smart contract,
generating an update to the blockchain and updating the copy of the blockchain in the memory using the update, the update identifying the new smart contract;
and
publishing the update blockchain to one or more host nodes for updating one or more additional copies of the blockchain;
and
in response to user rejection of the new smart contract, not establishing the secure communication session with the specified node.

9 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/970,418Filed 3 May 2018
Published: US 2019/0342077 A17 Nov 2019
Granted: 1 Dec 2020
Term ends: Not estimatedThe source records don’t support an estimate.

Classification8 codes

H04L 9/0643
The encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions;…
H04L 9/3239
Using cryptographic hash functions: involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
H04L 9/0825
Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely…: using…
H04L 9/30
Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols: public key, i.e.…