Remote monitoring of industrial control systems
AssigneeNEC Corporation Of America
InventorMoshe Karako
Life of this patent
Estimating the term…
Abstract
A method for automatic monitoring of industrial control systems, comprising: monitoring an environment by an electromagnetic sensor to measure a plurality of electromagnetic pulses emitted by at least one industrial control device during operation of the at least one industrial control device; calculating automatically at least one normal data pattern based on an analysis of the plurality of electromagnetic pulses; matching between at least one new electromagnetic pulse measured by the electromagnetic sensor and the at least one normal data pattern to automatically detect at least one abnormal data pattern; and sending automatically a security alert in response to the abnormal data pattern.
Claims11
A method for remote monitoring of industrial control systems, comprising:
- monitoring an environment of at least one industrial control device controlling an industrial process, by an electromagnetic sensor and at least one additional sensor selected from a group consisting of a light sensor and a sound sensor, said electromagnetic sensor is configured to measure a plurality of electromagnetic pulses emitted by the at least one industrial control device during operation of the at least one industrial control device, said light sensor is configured to detect light emitted by said at least one industrial control device during operation of the at least one industrial control device and said sound sensor is configured to detect sound emitted by said at least one industrial control device during operation of the at least one industrial control device,
- wherein said electromagnetic sensor and said at least one additional sensor are disposed externally and distant to said at least one industrial control device, for remote sensing of said at least one industrial control device, and not connected to said at least one industrial control device;
- calculating automatically at least one normal data pattern based on an analysis of the plurality of electromagnetic pulses and a plurality of sensed signals detected by the at least one additional sensor;
- matching between at least one new electromagnetic pulse measured by the electromagnetic sensor and new at least one of light signals and/or sound signals measured by the at least one additional sensor, and the at least one normal data pattern to automatically detect at least one abnormal data pattern;
- and
- sending automatically a security alert in response to the abnormal data pattern;
- wherein said at least one industrial control device is a member of a group consisting of:
- programmable logic controllers (PLCs), supervisory control and data acquisition (SCADA) systems, individual remote terminal units (RTUs), distributed control systems (DCS), and/or combination thereof.
A computerized device for remote monitoring of industrial control systems controlling an industrial process, comprising:
- at least one computerized processing unit for executing processor instructions;
- an electromagnetic sensor which monitors an environment to measure a plurality of electromagnetic pulses emitted by at least one industrial control device during operation of the at least one industrial control device;
- at least one additional sensor selected from a group consisting of a light sensor and a sound sensor, said light sensor is configured to detect light emitted by said at least one industrial control device during operation of the at least one industrial control device and said sound sensor is configured to detect sound emitted by said at least one industrial control device during operation of the at least one industrial control device;
- wherein said electromagnetic sensor and said at least one additional sensor are disposed externally and distant to said at least one industrial control device, for remote sensing of said at least one industrial control device, and not connected to said at least one industrial control device;
- a learning module which calculates automatically at least one normal data pattern based on an analysis of the plurality electromagnetic pulses and a plurality of sensed signals detected by the at least one additional sensor, using the at least one computerized processing unit;
- an anomaly detection module which matches between at least one new electronic measurement values measured on one of the at least one computerized control device and new at least one of light signals and/or sound signals measured by the at least one additional sensor, and the at least one normal data pattern to detect automatically at least one abnormal data pattern, using the at least one computerized processing unit;
- and
- a data interface for sending a security alert in response to the abnormal data pattern;
- wherein said at least one industrial control device is a member of a group consisting of:
- programmable logic controllers (PLCs), supervisory control and data acquisition (SCADA) systems, individual remote terminal units (RTUs), distributed control systems (DCS), and/or combination thereof.
A software program product for remote monitoring of industrial control systems controlling an industrial process, comprising:
- a non-transitory computer readable storage medium;
- first program instructions for monitoring an environment of at least one industrial control device controlling an industrial process, by an electromagnetic sensor and at least one additional sensor selected from a group consisting of a light sensor and a sound sensor, said electromagnetic sensor is configured to measure a plurality of electromagnetic pulses emitted by the at least one industrial control device during operation of the at least one industrial control device, said light sensor is configured to detect light emitted by said at least one industrial control device during operation of the at least one industrial control device and said sound sensor is configured to detect sound emitted by said at least one industrial control device during operation of the at least one industrial control device,
- wherein said electromagnetic sensor and said at least one additional sensor are disposed externally and distant to said at least one industrial control device, for remote sensing of said at least one industrial control device, and not connected to said at least one industrial control device;
- second program instructions for calculating automatically at least one normal data pattern based on an analysis of the plurality of electromagnetic pulses and a plurality of sensed signals detected by the at least one additional sensor;
- third program instructions for matching between at least one new electromagnetic pulse measured by the electromagnetic sensor and new at least one of light signals and/or sound signals measured by the at least one additional sensor, and the at least one normal data pattern to automatically detect at least one abnormal data pattern;
- and
- fourth program instructions for sending automatically a security alert in response to the abnormal data pattern;
- wherein the first, second, third, and fourth program instructions are executed by at least one computerized processor from the non-transitory computer readable storage medium;
- wherein said at least one industrial control device is a member of a group consisting of:
- programmable logic controllers (PLCs), supervisory control and data acquisition (SCADA) systems, individual remote terminal units (RTUs), distributed control systems (DCS), and/or combination thereof.
Dependencies are inferred from the claim text.