# US 12,111,639 B2 · Control system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,111,639 B2 - Document ID: US12111639B2 - Status: Granted - Kind: B2 - Application number: 17/425,126 - Filed: 2020-01-29 - Published: 2022-04-14 - Granted: 2024-10-08 - Earliest claimed: 2019-02-14 - Assignees: OMRON Corporation - Applicants: Omron Corporation - Inventors: Hitoshi Kataoka; Yuta Nagata - Web page: https://patentgrep.com/patent/US12111639B2 ## CPC - G05B 19/058: {Safety, monitoring} - G05B 19/4185: {characterised by the network communication} - G05B 19/4183: {characterised by data acquisition, e.g. workpiece identification} - G05B 19/41845: {characterised by system universality, reconfigurability, modularity} - G05B 19/4188: {characterised by CIM planning or realisation} - G05B 23/0275: {Fault isolation and identification, e.g. classify fault; estimate cause or root of failure} - G06F 21/577: {Assessing vulnerabilities and evaluating computer system security} - H04L 63/145: {the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms} - G05B: CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS (systems for controlling or regulating non-electric variables G05D; systems for regulating electric or magnetic variables G05F; control devices or systems insofar as characterised by mechanical features only G05G) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Information for addressing an incident depending on the incident is given. A control system includes a controller that performs a control operation for controlling an object to be controlled and a security component connected to the controller, the security component being responsible for a security function of the control system. The security component includes a collection module configured to collect state information indicating an operating state of the control system, a sensing module configured to sense an incident in the control system based on the collected state information, and a notification module configured to give information for addressing the sensed incident. ## Claims ### Claim 1 A control system in factory automation (FA), the control system comprising: a control unit configured to perform a control operation for controlling an object to be controlled; and a security unit, connected to the control unit, that is responsible for a security function for the control system, wherein the control unit includes: a communication port configured to connect a second data transmission path configured to communicate between the control unit and the object to be controlled, and a first communication controller configured to connect a first data transmission path configured to communicate between the control unit and the security unit, wherein the security unit includes a second communication controller configured to connect the first data transmission path connected to the first communication controller, and a network controller configured to connect to an external network of the control system, wherein the control unit is configured to connect to the external network through the first and second communication controllers, the security unit and the network controller, wherein the security unit further includes at least one processor configured to: collect state information indicating an operating state of the control system, the state information including contents of a communication through the network controller or the second communication controller, sense an incident in the control system based on the collected state information, and output information for addressing the sensed incident, and wherein the first data transmission path through which the control unit communicates with the security unit is independent of the second data transmission path through which the control unit communicates with the object to be controlled. ### Claim 2 (depends on 1) The control system according to claim 1, wherein the at least one processor of the security unit is further configured to sense a type of the sensed incident based on the collected state information satisfying any one of conditions corresponding to a plurality of types of incidents. ### Claim 3 (depends on 1) The control system according to claim 1, wherein the at least one processor of the security unit is further configured to sense a degree of seriousness of the sensed incident based on the collected state information satisfying any one of conditions corresponding to degrees of seriousness of influence on security by the sensed incident. ### Claim 4 (depends on 3) The control system according to claim 3, wherein the information for addressing the sensed incident includes information for addressing the sensed incident in accordance with the degree of seriousness. ### Claim 5 (depends on 3) The control system according to claim 3, wherein the at least one processor of the security unit is further configured to output a notification about the sensed degree of seriousness. ### Claim 6 (depends on 3) The control system according to claim 3, wherein the at least one processor of the security unit is further configured to output a notification about security risk expressed as a value calculated based on the collected state information and the degree of seriousness. ### Claim 7 (depends on 6) The control system according to claim 6, wherein the information for addressing the sensed incident includes information for addressing the sensed incident in accordance with the security risk. ### Claim 8 (depends on 1) The control system according to claim 1, wherein the information for addressing the sensed incident includes information for addressing the sensed incident that varies the operating state of the control system. ### Claim 9 (depends on 1) The control system according to claim 1, wherein the information for addressing the sensed incident is different depending on a configuration of the control unit. ### Claim 10 (depends on 1) The control system according to claim 1, wherein the information for addressing the sensed incident is different depending on a configuration of a network including the control unit. ### Claim 11 (depends on 1) The control system according to claim 1, wherein the at least one processor of the security unit is configured to output the information for addressing the sensed incident to an apparatus determined based on information on a network configuration in which a plurality of apparatuses each including the control unit are connected. ### Claim 12 (depends on 1) The control system according to claim 1, wherein the security unit is arranged on a communication route through which the control unit communicates with the external network. ### Claim 13 (depends on 1) The control system according to claim 1, wherein the state information further includes information of a structured query language (SQL) for an access to the external network. ### Claim 14 (depends on 1) The control system according to claim 1, wherein a communication protocol of the first data transmission path is different from a communication protocol of the second data transmission path including a cyclic communication protocol.