System and method for verifying components of an industrial monitoring system
AssigneeSiemens Aktiengesellschaft
InventorsAnna Palmin, Xin Xie
Life of this patent
Estimating the term…
Abstract
A system for verifying components of an industrial monitoring system includes a first module which is configured to establish a trust relationship with a component of the industrial monitoring system and request a component certificate from the component. The component certificate contains relevant information relating to the component. A second module is configured to check, in interaction with the component, the component certificate on the basis of relevant data stored in a trusted database, and to generate a notification on the basis of the result of the checking process.
Claims16
A system for verifying components of an industrial monitoring system, the system for verifying components comprising:
- a first module configured to establish a relationship of trust as a confidential connection with a component of the industrial monitoring system, and to request a component certificate from the component, with the component certificate containing relevant information relating to the component;
- a second module configured to check the component certificate based on relevant data kept in a trustworthy database and comprising one or more trust chains and/or one or more certificate blacklists, and in interaction with the component, to validate during the check one or more trust chains and/or one or more certificate blacklists, and to respond appropriately to a result of the check;
- a further module configured to prevent further communication between the component and other plant components as a function of the result of the check;
- and
- a secure memory configured to obtain the relevant data from the trustworthy database at regular intervals or in an event-controlled manner via a secure connection and to store or install the relevant in the secure memory, wherein the second module comprises the secure memory.
A computer-implemented method for verifying components of an industrial monitoring system, the computer implemented method comprising:
- establishing with a first module, a relationship of trust as a confidential connection with a component of the industrial monitoring system;
- requesting, with the first module, a component certificate from the component, wherein the component certificate contains relevant information relating to the component;
- checking, with a second module, the component certificate in interaction with the component and based on relevant data kept in a trustworthy database, wherein the relevant data comprises one or more trust chains and/or one or more certificate blacklists;
- validating, with the second module, during the check one or more trust chains and/or one or more certificate blacklists;
- giving with the second module, an appropriate response to a result of the check;
- preventing, with a further module further communication between the component and other plant components as a function of the result of the check;
- obtaining, with a secure memory, the relevant data from the trustworthy database at regular intervals or in an event-controlled manner via a secure connection;
- and
- storing or installing the relevant data in the secure memory, wherein the second module comprises the secure memory.
Dependencies are inferred from the claim text.