# US 12,001,597 B2 · Tamper resistant module for industrial control system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,001,597 B2 - Document ID: US12001597B2 - Status: Granted - Kind: B2 - Application number: 18/327,273 - Filed: 2023-06-01 - Published: 2023-12-07 - Granted: 2024-06-04 - Earliest claimed: 2014-10-20 - Assignees: Analog Devices, Inc. - Applicants: Analog Devices, Inc. - Inventors: Albert Rooyakkers; Ken Doucette - Web page: https://patentgrep.com/patent/US12001597B2 ## CPC - G06F 21/86: Secure or tamper-resistant housings - G06F 21/604: {Tools and structures for managing or administering access control systems} - G06F 21/71: to assure secure computing or processing of information - G06F 21/85: interconnection devices, e.g. bus-connected or in-line devices - H04L 67/12: specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks - H05K 5/0208: {Interlock mechanisms; Means for avoiding unauthorised use or function, e.g. tamperproof} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H05K: PRINTED CIRCUITS; CASINGS OR CONSTRUCTIONAL DETAILS OF ELECTRIC APPARATUS; MANUFACTURE OF ASSEMBLAGES OF ELECTRICAL COMPONENTS ## Abstract An industrial control system module and methods are described for self-destruction or the destruction and/or erasure of sensitive data within the industrial control system module upon an indication of an unauthorized module access event. In an implementation, a secure industrial control system module includes a circuit board including electrical circuitry; a sealed encasement that houses the circuit board, where the sealed encasement includes a housing having a first housing side and a second housing side, where the housing is configured to house the circuit board when the first housing side and the second housing side are coupled together; and a first sensor component integrated with the sealed encasement, where the first sensor component is communicably coupled to the circuit board and electrical circuitry and is configured to provide an indication of an unauthorized access event. ## Claims ### Claim 1 A secure industrial control system module, comprising: a housing including a first housing side and a second housing side; a circuit board housed by the housing, the circuit board including a power backplane and a communications backplane; a computer-readable storage memory communicatively coupled to the circuit board; a high potential capacitor operatively coupled to the computer-readable storage memory; an encasement seal disposed on the first housing side and the second housing side, the encasement seal including an electrical circuit configured to indicate an unauthorized access event in response to damage to the electrical circuit; and a controller communicatively coupled to the electrical circuit, wherein, in response to the unauthorized access event, the controller is configured to perform a security action, the security action including: initiate an encryption algorithm to encrypt data stored on the computer-readable storage memory, and activate the high potential capacitor to erase data stored on the computer-readable storage memory. ### Claim 2 (depends on 1) The secure industrial control system module of claim 1, wherein the circuit board includes at least one of a communication module, a power module, a physical interconnect device, a controller, a memory, or a processor. ### Claim 3 (depends on 1) The secure industrial control system module of claim 1, wherein the unauthorized access event includes breaching the encasement seal. ### Claim 4 (depends on 1) The secure industrial control system module of claim 1, further comprising at least one captive fastener that couples the first housing side and a second housing side. ### Claim 5 (depends on 1) The secure industrial control system module of claim 1, wherein the controller is configured to erase an encryption key stored on the computer-readable storage memory in response to the unauthorized access event. ### Claim 6 (depends on 1) The secure industrial control system module of claim 1, wherein the security action further configured to activate the high potential capacitor to destroy electrical circuitry on the circuit board. ### Claim 7 A secure industrial control system module, comprising: a housing including a first housing side and a second housing side; a circuit board housed by the housing, the circuit board including a power backplane and a communications backplane; a computer-readable storage memory communicatively coupled to the circuit board; a high potential capacitor operatively coupled to the computer-readable storage memory; a switch trigger disposed on the first housing side; an electronic switch assembly disposed on the second housing side, the electronic switch assembly configured to receive the switch trigger, the electronic switch assembly configured to indicate an unauthorized access event in response to separation of the switch trigger from the electronic switch assembly; and a controller communicatively coupled to the electronic switch assembly, wherein, in response to the unauthorized access event, the controller is configured to perform a security action, the security action including: initiate an encryption algorithm to encrypt data stored on the computer-readable storage memory, and activate the high potential capacitor to erase data stored on the computer-readable storage memory. ### Claim 8 (depends on 7) The secure industrial control system module of claim 7, wherein the circuit board includes at least one of a communication module, a power module, a physical interconnect device, a controller, a memory, or a processor. ### Claim 9 (depends on 7) The secure industrial control system module of claim 7, further comprising at least one captive fastener that couples the first housing side and a second housing side. ### Claim 10 (depends on 7) The secure industrial control system module of claim 7, wherein the controller is configured to erase an encryption key stored on the computer-readable storage memory in response to the unauthorized access event. ### Claim 11 (depends on 7) The secure industrial control system module of claim 7, wherein the security action is further configured to activate the high potential capacitor to destroy electrical circuitry on the circuit board. ### Claim 12 (depends on 7) The secure industrial control system module of claim 7, wherein implementing the security action further includes exposing the industrial control system module to at least one of destructive heat or a destructive electromagnetic field. ### Claim 13 A secure industrial control system module, comprising: a housing; a circuit board housed by the housing, the circuit board including a power backplane and a communications backplane; a computer-readable storage memory communicatively coupled to the circuit board; a high potential capacitor operatively coupled to the computer-readable storage memory; a sensor housed by the housing, the sensor configured to indicate an unauthorized event in response to at least one of: detection of ambient light, detection of a predetermined amount of heat or radiation, detection of a predetermined level of vibration, or detection of movement or repositioning of the industrial control system module; and a controller communicatively coupled to the sensor, wherein, in response to the unauthorized access event, the controller is configured to perform a security action, the security action including: initiate an encryption algorithm to encrypt data stored on the computer-readable storage memory, and activate the high potential capacitor to erase data stored on the computer-readable storage memory. ### Claim 14 (depends on 13) The secure industrial control system module of claim 13, wherein the sensor includes at least one of an optical sensor, a thermal sensor, a vibration sensor, a sound sensor, or an accelerometer. ### Claim 15 (depends on 13) The secure industrial control system module of claim 13, further comprising: a second sensor, the second sensor configured to indicate a second unauthorized access event in response to at least one of: detection of ambient light, detection of a predetermined amount of heat or radiation, detection of a predetermined level of vibration, or detection of movement or repositioning of the industrial control system module; wherein the controller performs the security action in response to both the unauthorized access event of the sensor and the second unauthorized access event of the second sensor. ### Claim 16 (depends on 13) The secure industrial control system module of claim 13, wherein the circuit board includes at least one of a communication module, a power module, a physical interconnect device, a controller, a memory, or a processor. ### Claim 17 (depends on 13) The secure industrial control system module of claim 13, further comprising at least one captive fastener that couples a first housing side and a second housing side. ### Claim 18 (depends on 13) The secure industrial control system module of claim 13, wherein the controller is configured to erase an encryption key stored on the computer-readable storage memory in response to the unauthorized access event. ### Claim 19 (depends on 13) The secure industrial control system module of claim 13, wherein the security action is further configured to activate the high potential capacitor to destroy electrical circuitry on the circuit board. ### Claim 20 (depends on 13) The secure industrial control system module of claim 13, wherein implementing the security action includes exposing the industrial control system module to at least one of destructive heat or a destructive electromagnetic field.