Operator action authentication in an industrial control system

A communications/control module, comprising:

• at least one processor;
• and
• a non-transitory medium bearing a set of instructions executable by the at least one processor, the set of instructions including instructions to:
• receive an action request initiated at an action originator, the action request forming a part of a request datagram, the request datagram comprising a first nonce, a first device authenticating key certificate, and a first identity attribute certificate, wherein:
• an unsigned version of the action request is transmitted from the action originator to an action authenticator located physically remote from the action originator,
• the action authenticator determines whether the received action request is an authorized action request independent of the action originator,
• the action authenticator generates a signed version of the action request based on the determination, and
• the action authenticator transmits the signed action request to the communication/control module, authenticate the signed action request wherein authenticating the received signed action request further comprises:
• verifying that the request datagram is valid,
• sending a response datagram to the action authenticator, the response datagram comprising a second nonce, a first signature associated with the first nonce and the second nonce, and a second identity attribute certificate,
• receiving an authentication datagram from the action authenticator, the authentication datagram comprising a second signature associated with the first nonce and the second nonce, and
• validating the authentication datagram by verifying the second signature associated with the first nonce and the second nonce;
• determine an authenticity of the received action request based on whether the received action request is the signed version of the action request;
• and
• perform an action associated with the received action request based on the determined authenticity.

A secure communications/control module in communication with one or more industrial elements, the one or more industrial elements including at least one input/output module operable to receive industrial sensor information or send control information to an industrial actuator or motor, the communications/control module including at least one processor and a non-transitory medium bearing a set of instructions executable by the at least one processor, the set of instructions including instructions to:

• receive an action request from an action authenticator, the action request forming a part of a request datagram, the request datagram comprising a first nonce, a first device authenticating key certificate, and a first identity attribute certificate;
• authenticate the received action request based on a determination of whether the received action is a signed version of the action request, wherein authenticating the received action request further comprises:
• verifying that the request datagram is valid,
• sending a response datagram to the action authenticator, the response datagram comprising a second nonce, a first signature associated with the first nonce and the second nonce, and a second identity attribute certificate,
• receiving an authentication datagram from the action authenticator, the authentication datagram comprising a second signature associated with the first nonce and the second nonce, and
• validating the authentication datagram by verifying the second signature associated with the first nonce and the second nonce;
• and
• execute the action request based on whether the received action request is an authenticated action request.