IOT security mechanisms for industrial applications
AssigneeSchlumberger Technology Corporation
InventorsApurva Mohan, Anh Dang, Yusef Alaas, Martin Ernst
Life of this patent
Estimating the term…
Abstract
The disclosure provides methods and systems for securing internet of thing systems. One method includes receiving, at a computing device, a token, wherein the token comprises a cryptographically signed list of rights that the computing device is authorized to request. The method also includes requesting, using the computing device, an action of a receiving device in an industrial location, wherein requesting the action comprises sending the token with the request to cause the receiving device to authenticate the user of the computing device and confirm the user is authorized to perform the action.
Claims13
A method comprising:
- receiving, at a computing device, a token, wherein the token comprises a cryptographically signed list of rights or actions that the computing device is authorized to perform;
- requesting, using the computing device, an action of a receiving device in an industrial location, wherein requesting the action involves sending the token as part of a request from the computing device, wherein a signature included in the token is checked against a cryptographic key to ensure the signature and list of the token are valid and selectively authorize the computing device to perform the action;
- wherein the computing device initiates connections to a trusted external network, and wherein trusted locations are listed in the computing device and also in an enterprise firewall in a remote network to which a plurality of computing devices are connected;
- and
- determining, using at least the receiving device, whether the computing device is associated with an authorized user of locally connected networks at the industrial location.
A system configured to provide security at an edge, wherein the system comprises:
- a computing device configured to support authentication and role-based authorization for users, applications, and receiving devices;
- wherein the role-based authorization comprises accessing user mapping and matching an assigned role for an identified user to be authorized via the computing device;
- wherein the authentication processes comprise at least one of a connected scenario, a disconnected scenario, and a WI-FI-based access;
- wherein the computing device is also configured to determine environment parameters at the edge and use the environment parameters to dynamically adapt authentication processes for the users;
- and
- wherein the computing device is an edge gateway and comprises a containerized structure that includes native security measures, third-party managed security services, and monitoring solutions installed thereon.
Dependencies are inferred from the claim text.