Interface for a core process control system

A processor network, including:

• hardware processing resources in a protected domain and configured to host an industrial control system configured to control one or more field devices;
• hardware processing resources in a cloud domain that is separate from the protected domain, the cloud domain hardware processing resources being configured to receive from a client a message with a request containing logical actions and to authenticate the client;
• and
• hardware processing resources in an edge domain that is separate from the protected domain, the edge domain hardware processing resources being configured to initiate a verification of the message and check whether the authenticated client is authorized to perform the logical actions,
• wherein the protected domain hardware processing resources are further configured to map the logical actions to physical actions subject to pre-specified rules, and to cause the industrial control system to execute the physical actions.

A computer program product comprising:

• a non-transitory computer-readable storage medium;
• and
• instructions stored in the storage medium and configured to cause a processor network to perform a method of executing a request to an industrial control system, the processor network having:
• a protected domain including processing resources to host an industrial control system configured to control one or more field devices;
• a cloud domain including processing resources separate from the protected domain, which are configured to receive from a client a message with a request containing logical actions and to authenticate the client;
• and
• an edge domain including processing resources separate from the protected domain, which are configured to initiate a verification of the message and check whether the authenticated client is authorized to perform the logical actions,
• wherein the processing resources of the protected domain are further configured to map the logical actions to physical actions subject to pre-specified rules, and to cause the industrial control system to execute the physical actions,
• wherein the method comprises:
• on the processing resources in the cloud domain separate from the protected domain,
• receiving from the client the message with the request containing logical actions, and
• authenticating the client;
• on the processing resources in the edge domain separate from the protected domain,
• initiating the verification of the message, and
• checking whether the authenticated client is authorized to perform the logical actions:
• on the processing resources in the protected domain,
• mapping the logical actions to the physical actions subject to the pre-specified rules, and
• causing the industrial control system to execute the physical actions.