Security services in a software defined control system
AssigneeFisher-Rosemount Systems, Inc.
InventorsAnthony Amaro, Jr., Mark J. Nixon
Life of this patent
Estimating the term…
Abstract
A software defined (SD) process control system (SDCS) includes a control container having contents which are executable during run-time of the process plant to control at least a portion of an industrial process. The SDCS also includes a security service associated with the control container and including contents which define one or more security conditions. The security service executes via a container on a compute node of the SDCS to control access to and/or data flow from the control container based on the contents of the security container.
Claims16
A method of securing a process control system of a process plant, the method comprising:
- associating a security container with a control container of the process control system, the security container having contents which define one or more security conditions including a security condition to prevent data from external sources to the process plant from being sent to the control container, and the control container including contents which are executable during run-time of the process plant to control at least a portion of an industrial process;
- obtaining a change in a configuration of the control container:
- updating the contents of the security container with alternative or additional security conditions from the one or more security conditions in response to the change in the configuration of the associated control container;
- and
- controlling access to and/or data flow from the control container based on the contents of the security container, wherein a container is an isolated executing environment within an operating system of a compute node on which the container executes, and the container includes software dependencies or software libraries configured to execute the container on one of a plurality of compute nodes.
A software defined process control system (SDCS) to control an industrial process in a process plant, the SDCS comprising:
- a control container of the SDCS including contents which are executable during run-time of the process plant to control at least a portion of an industrial process, wherein the control container obtains a change in a configuration of the control container;
- and
- a security service associated with the control container and including contents which define one or more security conditions including a security condition to prevent data from external sources to the process plant from being sent to the control container;
- wherein the security service executes via a security container on one or more hardware processors of a compute node of the SDCS to:
- update the contents of the security container with alternative or additional security conditions from the one or more security conditions in response to the change in the configuration of the associated control container, wherein the one or more security conditions include a security condition to prevent data from external sources to the process plant from being sent to the control container;
- and
- control access to and/or data flow from the control container based on the contents of the security container, wherein a container is an isolated executing environment within an operating system of a compute node on which the container executes and the container includes software dependencies or software libraries configured to execute the container on one of a plurality of compute nodes.
Dependencies are inferred from the claim text.