Operator action authentication in an industrial control system

A communications/control module, comprising:

• at least one processor;
• and
• a non-transitory medium bearing a set of instructions executable by the at least one processor, the set of instructions including instructions to:
• receive an action request initiated at an action originator, the action request forming a part of a request datagram, the request comprising a first nonce, a first device authenticating key certificate, and a first identity attribute certificate, wherein:
• an unsigned version of the action request is transmitted from the action originator to an action authenticator,
• the action authenticator determines whether the received action request is an authorized action request independent of the action originator, wherein the determination further comprises:
• verifying that the request datagram is valid;
• sending a response datagram to the action authenticator, the response datagram comprising a second nonce, a first signature associated with the first nonce and the second nonce, and a second identity attribute certificate;
• receiving an authentication datagram from the action authenticator, the authentication datagram comprising a second signature associated with the first nonce and the second nonce;
• and
• validating the authentication datagram by verifying the second signature associated with the first nonce and the second nonce, the action authenticator generating a signed version of the action request based on the determination, the action authenticator transmitting the signed version of the action request to the communication/control module;
• determine an authenticity of the received action request based on whether the received action request is the signed version of the action request;
• and
• perform an action associated with the received action request based on the determination, wherein the action request includes at least one operator control action provided at the action originator, and wherein the action originator includes at least one of:
• an operator interface, an engineering interface, a local application interface, and a remote application interface.

A secure communications/control module in communication with one or more industrial elements, the one or more industrial elements including at least one input/output module operable to receive industrial sensor information or send control information to an industrial actuator or motor, the communications/control module including at least one processor and a non-transitory medium bearing a set of instructions executable by the at least one processor, the set of instructions including instructions to:

• receive an action request from an action authenticator, the action request forming a part of a request datagram, the request datagram comprising a first nonce, a first device authenticating key certificate, and a first identity attribute certificate;
• authenticate the received action request based on a determination of whether the received action is a signed version of the action request, wherein authenticating the received action request further comprises:
• verifying that the request datagram is valid;
• sending a response datagram to the action authenticator, the response datagram comprising a second nonce, a first signature associated with the first nonce and the second nonce, and a second identity attribute certificate;
• receiving an authentication datagram from the action authenticator, the authentication datagram comprising a second signature associated with the first nonce and the second nonce;
• and
• validating the authentication datagram by verifying the second signature associated with the first nonce and the second nonce;
• and
• execute the action request based on whether the received action request is an authenticated action request, wherein the action request includes at least one operator control action, the at least one operator control action being at least one of:
• reading or changing control set points, controlling one or more actuators, and executing control commands from an operator interface or an engineering interface.