System and method for retrieving alarm data from an isolated network
AssigneeSaudi Arabian Oil Company
InventorsRakan Hamed Albeladi, Sami Abdulrahman Alamer
Life of this patent
Estimating the term…
Abstract
System and methods are disclosed herein for retrieving alarm data from an isolated network without compromising its security integrity. In an example, a data diode can be used to couple a first network and a second network. An alarm transmitter can be coupled to the first network, and an alarm receiver can be coupled to the second network. The alarm transmitter that can be operable to receive alarm data and communicate the alarm data by the data diode to the alarm receiver. The alarm receiver can be operable to output an alert based on the analysis of the alarm data.
Claims17
A system comprising:
- a data diode coupling a first network and a second network;
- a Supervisory Control and Data Acquisition (SCADA) system coupled to the first network, wherein the SCADA system is operable to store alarm data from maintenance alarms in a first database and operational data from operational alarms in a second database;
- an alarm transmitter coupled to the first network and operable to query the first database to receive the alarm data;
- an alarm receiver coupled to the second network, and wherein
- the alarm transmitter is operable to receive the alarm data and communicate the alarm data by the data diode to the alarm receiver, and
- the alarm receiver is operable to output an alert based on analysis of the alarm data.
A method comprising:
- segregating, at a Supervisory Control and Data Acquisition (SCADA) system, maintenance alarms and operational alarms into respective first and second databases, the SCADA system being coupled to a first network;
- configuring the first network with an alarm transmitter coupled to the first network and operable to query the first database to receive one or more maintenance alarms of the maintenance alarms from the first database of the SCADA system;
- configuring a second network with an alarm receiver to receive the one or more maintenance alarms from the alarm transmitter and output an alert based on the the received one or more maintenance alarms;
- and
- coupling the first network to the second network with a data diode, the data diode being used to provide the one or more maintenance alarms from the first network to the second network and block any data from being provided from the second network to the first network.
A system comprising:
- a first computing platform coupled to a Supervisory Control and Data Acquisition (SCADA) system on a first network, wherein the SCADA system is operable to store alarm data from maintenance alarms in an alarm database and operational data from operational alarms in an operational database, wherein the first computing platform is operable to query the alarm database and receive the alarm data from the alarm database;
- and
- a second computing platform on a second network, the first network being coupled to the second network by a data diode so that the first computing platform can communicate the alarm data to the second computing platform to cause the second computing platform to provide an alert based on the received alarm data, wherein each computing platform comprises:
- one or more processors;
- and
- a non-transitory computer readable storage medium storing machine-readable instructions that when executed by the one or more processors cause the respective computing platform to perform the operations recited herein.
Dependencies are inferred from the claim text.