Device for use in a network

A controller configured to coordinate an access of a new device to at least one virtual sub-network of a network, the controller configured to:

• initiate an assignment of a trust level to the new device before permitting the new device access the at least one virtual sub-network, wherein each virtual sub-network of the at least one virtual sub-network is dedicated to one production process;
• and
• initiate a transmission, when the trust level assigned to the new device corresponds to or comprises a certain trust level assigned to the at least one virtual sub-network, of a token describing a permission granted to the new device to enter the at least one virtual sub-network, describing the certain trust level assigned to the at least one virtual sub-network, or describing the permission granted to the new device to enter the at least one virtual sub-network and describing the certain trust level assigned to the at least one virtual sub-network,
• wherein the token is configured to assign the new device a right to access and use the at least one virtual sub-network and perform the production process to which the at least one virtual sub-network is dedicated according to the trust level assigned to the new device after determining the new device is permitted to join the at least one virtual sub-network.

A network comprising at least one existing device, a plurality of virtual sub-networks, and at least one controller configured to coordinate an access of a new device to at least one virtual sub-network of the plurality of virtual sub-networks,

• wherein each virtual sub-network of the plurality of virtual sub-networks comprises at least one of:
• an isolated sub-network comprising a certification authority configured for initial communication with the new device entering the network,
• a virtual security management sub-network comprising a network access controller and a certification authority and configured to share information between identity management within the network and network access control,
• a virtual network management sub-network configured to share information amongst the at least one existing device and/or the new device having a right to enforce virtual sub-networks,
• a virtual default sub-network configured to exchange discovery or/and plug-negotiation information between the at least one existing device and the new device,
• a virtual registration sub-network configured for authentication between the new device and a network equipment, and
• a virtual production sub-network, dedicated to one production process, between the at least one existing device and the new device configured to perform the production process,
• wherein the plurality of virtual sub-networks is configured to assign the new device a right to access and use the at least one virtual sub-network of the plurality of virtual sub-networks and perform the production process to which the at least one virtual sub-network is dedicated according to a trust level assigned to the new device after assigning the new device the trust level and determining the new device is permitted to join the network.

A method for integrating a new device in a physical network comprising at least one existing device, wherein, in the physical network, at least one virtual sub-network is assigned a certain trust level and each virtual sub-network of the at least one virtual sub-network is dedicated to one production process, the method comprising:

• assigning a first trust level to the new device;
• receiving, by the new device, a token correlated with the first trust level assigned to the new device;
• permitting the new device into the at least one virtual sub-network upon presentation of the token when the first trust level corresponds to or comprises the certain trust level;
• and
• assigning the permitted new device a right to access and use the at least one virtual sub-network and perform the production process to which the at least one virtual sub-network is dedicated according to the first trust level assigned to the new device.