# US 11,115,218 B2 · System for secure metering from systems of untrusted data derived from common sources > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,115,218 B2 - Document ID: US11115218B2 - Status: Granted - Kind: B2 - Application number: 16/248,355 - Filed: 2019-01-15 - Published: 2020-07-16 - Granted: 2021-09-07 - Earliest claimed: 2019-01-15 - Assignees: Fisher-Rosemount Systems, Inc. - Applicants: Fisher-Rosemount Systems, Inc. - Inventors: Mark J. Nixon; Anthony Amaro, Jr.; Gang Wang - Web page: https://patentgrep.com/patent/US11115218B2 ## CPC - H04L 9/3236: {using cryptographic hash functions} - H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD} - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - G06F 21/64: Protecting data integrity, e.g. using checksums, certificates or signatures - H04L 9/0637: {Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]} - H04L 63/123: {received data contents, e.g. message integrity} - H04L 9/50: {using hash chains, e.g. blockchains or hash trees} - Y02P 90/02: Total factory control, e.g. smart factories, flexible manufacturing systems [FMS] or integrated manufacturing systems [IMS] - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - Y02P: CLIMATE CHANGE MITIGATION TECHNOLOGIES IN THE PRODUCTION OR PROCESSING OF GOODS ## Abstract To provide a trusted, secure, and immutable record of transactions within a process plant, techniques are described for utilizing a distributed ledger in process control systems. The distributed ledger may be maintained by nodes which receive transactions broadcasted from field devices, controllers, operator workstations, or other devices operating within the process plant. The transactions may include process plant data, such as process parameter data, product parameter data, configuration data, user interaction data, maintenance data, commissioning data, plant network data, and product tracking data. The distributed ledgers may also be utilized to execute smart contracts to allow machines such as field devices to transact by themselves without human intervention. In this manner, recorded process parameter values and product parameter values may be retrieved to verify the quality of products. Moreover, regulatory data may be recorded in response to triggering events so that regulatory agencies can review the data. ## Claims ### Claim 1 A method for secure metering of untrusted data in process control systems using a distributed ledger maintained by a plurality of participants, the method comprising: collecting, by a field device performing a physical function to control an industrial process in a process plant, a measurement of a parameter within the process plant; obtaining, by a computing device, the measurement of the parameter; generating a transaction including the measurement; and prior to expiration of a threshold time period, transmitting the transaction to at least one other participant in a local distributed ledger network of participants maintaining a local distributed ledger; after the threshold time period has expired, transmitting a plurality of transactions generated during the threshold time period to at least one participant in a global distributed ledger network of participants maintaining a global distributed ledger, wherein the local distributed ledger is maintained by nodes in the process plant, and the global distributed ledger is maintained by nodes in a plurality of process plants. ### Claim 2 (depends on 1) The method of claim 1, further comprising: adding the transaction to a local block of transactions; solving a cryptographic puzzle based on the local block of transactions; adding the solution to the cryptographic puzzle to the local block of transactions; and transmitting the local block of transactions to at least one other participant in the local distributed ledger network. ### Claim 3 (depends on 2) The method of claim 2, further comprising: after the threshold time period, transmitting one or more local blocks of transactions generated during the threshold time period to at least one participant in the global distributed ledger network. ### Claim 4 (depends on 1) The method of claim 1, further comprising: after the threshold time period, pruning at least some of the plurality of transaction generated during the threshold time period from the local distributed ledger network. ### Claim 5 (depends on 1) The method of claim 1, wherein the global distributed ledger is a permissioned blockchain viewable by a plurality of entities operating a plurality of process plants. ### Claim 6 (depends on 5) The method of claim 5, wherein the parameter is related to a shared resource between the plurality of entities operating the plurality of process plants. ### Claim 7 (depends on 6) The method of claim 6, wherein the shared resource between the plurality of entities operating the plurality of process plants is a fluid in a fluid pipeline, and the parameter measurement is an amount of fluid obtained by one of the plurality of entities from the fluid pipeline. ### Claim 8 (depends on 5) The method of claim 5, wherein the global distributed ledger includes a plurality of global distributed ledgers corresponding to the plurality of entities, each global distributed ledger including transactions stored in the local distributed ledger for a same respective entity as the global distributed ledger. ### Claim 9 (depends on 8) The method of claim 8, further comprising: for transactions generated during the threshold time period, adding the transaction from each of the plurality of global distributed ledgers to a state block of transactions; solving a cryptographic puzzle based on the state block of transactions; adding the solution to the cryptographic puzzle to the state block of transactions; and transmitting the state block of transactions to at least one other participant in a super blockchain network of participants maintaining a super blockchain. ### Claim 10 (depends on 1) The method of claim 1, wherein the local distributed ledger is a private blockchain viewable by an entity operating the process plant. ### Claim 11 (depends on 1) The method of claim 1, wherein generating a transaction including the measurement includes generating the transaction including a cryptographic hash value corresponding to the measurement. ### Claim 12 A system for secure metering of untrusted data in process control systems using a distributed ledger maintained by a plurality of participants comprising: one or more field devices disposed in a process plant each performing a physical function to control an industrial process, the one or more field devices configured to collect measurements of parameters within the process plant and provide the parameter measurements to one or more edge gateway devices; and the one or more edge gateway devices executing in the process plant each including: one or more processors; a communication unit; and a non-transitory computer-readable medium coupled to the one or more processors and the communication unit and storing instructions thereon, that when executed by the one or more processors, causes the edge gateway device to: obtain at least one of the parameter measurements; generate a transaction including the measurement; and prior to expiration of a threshold time period, transmit the transaction to at least one other edge gateway in a local distributed ledger network of edge gateways maintaining a local distributed ledger; and after the threshold time period has expired, transmit a plurality of transactions generated during the threshold time period to at least one participant in a global distributed ledger network of participants maintaining a global distributed ledger, wherein the local distributed ledger is maintained by nodes in the process plant, and the global distributed ledger is maintained by nodes in a plurality of process plants. ### Claim 13 (depends on 12) The system of claim 12, wherein the instructions further cause the edge gateway to: add the transaction to a local block of transactions; solve a cryptographic puzzle based on the local block of transactions; add the solution to the cryptographic puzzle to the local block of transactions; and transmit the local block of transactions to at least one other edge gateway in the local distributed ledger network. ### Claim 14 (depends on 13) The system of claim 13, wherein the instructions further cause the edge gateway to: after the threshold time period, transmit one or more local blocks of transactions generated during the threshold time period to at least one participant in the global distributed ledger network. ### Claim 15 (depends on 12) The system of claim 12, wherein the instructions further cause the edge gateway to: after the threshold time period, prune at least some of the plurality of transactions generated during the threshold time period from the local distributed ledger network. ### Claim 16 (depends on 12) The system of claim 12, wherein the global distributed ledger is a permissioned blockchain viewable by a plurality of entities operating a plurality of process plants. ### Claim 17 (depends on 16) The system of claim 16, wherein the parameter is related to a shared resource between the plurality of entities operating the plurality of process plants. ### Claim 18 (depends on 17) The system of claim 17, wherein the shared resource between the plurality of entities operating the plurality of process plants is a fluid in a fluid pipeline, and the parameter measurement is an amount of fluid obtained by one of the plurality of entities from the fluid pipeline. ### Claim 19 (depends on 16) The system of claim 16, wherein the global distributed ledger includes a plurality of global distributed ledgers corresponding to the plurality of entities, each global distributed ledger including transactions stored in the local distributed ledger for a same respective entity as the global distributed ledger. ### Claim 20 (depends on 19) The system of claim 19, further comprising: a computing device in a global distributed ledger network maintaining a global distributed ledger including: one or more processors; a communication unit; and a non-transitory computer-readable medium coupled to the one or more processors and the communication unit and storing instructions thereon, that when executed by the one or more processors, causes the computing device to: for transactions generated during the threshold time period, add the transaction from each of the plurality of global distributed ledgers to a state block of transactions; solve a cryptographic puzzle based on the state block of transactions; add the solution to the cryptographic puzzle to the state block of transactions; and transmit the state block of transactions to at least one other participant in a super blockchain network of participants maintaining a super blockchain. ### Claim 21 (depends on 12) The system of claim 12, wherein the local distributed ledger is a private blockchain viewable by an entity operating the process plant. ### Claim 22 (depends on 12) The system of claim 12, wherein the transaction includes a cryptographic hash value corresponding to the measurement. ### Claim 23 A validating network node in a process plant on a local distributed ledger network comprising: a transceiver configured to (i) communicate with one or more field devices each performing a physical function to control an industrial process in the process plant and collecting measurements of parameters within the process plant, and to (ii) exchange local distributed ledger data with peer network nodes, the local distributed ledger data including transactions having parameter measurements; a storage media configured to store a copy of the local distributed ledger; and a process data validator configured to apply a set of consensus rules to the distributed ledger data received from the peer network nodes, the process data validator being further configured to append the distributed ledger data received from the peer network nodes to the copy of the distributed ledger if the distributed ledger data satisfies the consensus rules, wherein after a threshold time period has expired, the transceiver is configured to transmit a plurality of transactions generated during the threshold time period to at least one participant in a global distributed ledger network of participants maintaining a global distributed ledger, and wherein the local distributed ledger is maintained by validating network nodes in the process plant, and the global distributed ledger is maintained by validating network nodes in a plurality of process plants. ### Claim 24 (depends on 23) The validating network node of claim 23, wherein after the threshold time period, the validating network node is configured to prune at least some of the plurality of transactions generated during the threshold time period from the copy of the local distributed ledger. ### Claim 25 (depends on 23) The validating network node of claim 23, wherein the global distributed ledger is a permissioned blockchain viewable by a plurality of entities operating a plurality of process plants. ### Claim 26 (depends on 25) The validating network node of claim 25, wherein at least one of the parameters is related to a shared resource between the plurality of entities operating the plurality of process plants. ### Claim 27 (depends on 25) The validating network node of claim 25, wherein the global distributed ledger includes a plurality of global distributed ledgers corresponding to the plurality of entities, each global distributed ledger including transactions stored in the local distributed ledger for a same respective entity as the global distributed ledger. ### Claim 28 (depends on 23) The validating network node of claim 23, wherein the local distributed ledger is a private blockchain viewable by an entity operating the process plant. ### Claim 29 (depends on 23) The validating network node of claim 23, wherein a transaction includes a cryptographic hash value corresponding to a parameter measurement.