System and method for enhanced control system security
AssigneeGeneral Electric Company
InventorsSusan Jean Brown, Richard William Shaw, JR., Jeffery Martin Emery
Life of this patent
Estimating the term…
Abstract
A system including a controller having a data repository configured to store a first mapping associating a user to an Application Certificate and a second mapping associating the user to a user privilege. The system further includes an OPC Unified Architecture (UA) server configured to provide server access based on receiving the Application Certificate from an OPC UA client and enforcing the user privilege, in which the user privilege is retrievable based on the first and the second mappings.
Claims20
A system, comprising:
- a controller, comprising:
- a data repository configured to store a first mapping associating a user to an application certificate and a second mapping associating the user to a user privilege;
- and
- an Object Linking and Embedding (OLE) for Process Control (OPC) Unified Architecture (UA) server configured to provide server access based on receiving the application certificate from an OPC UA client and enforcing the user privilege, wherein the user privilege is retrievable based on the first and the second mappings.
A method comprising:
- creating a first map associating a user to an application certificate;
- creating a second map associating the user to a user privilege;
- receiving the application certificate from an Object Linking and Embedding (OLE) for Process Control (OPC) Unified Architecture (UA) client;
- and
- restricting access to a controller based on retrieving a user privilege, wherein retrieving the user privilege comprises using the first and the second mappings.
A tangible, non-transitory, computer-readable medium storing a plurality of instructions executable by a processor of an electronic device, the instructions comprising:
- instructions to create a first map, wherein the first map is configured to associate a user to an application certificate;
- instructions to create a second map, wherein the second map is configured to associate the user to a user privilege;
- instructions to receive the application certificate from an Object Linking and Embedding (OLE) for Process Control (OPC) Unified Architecture (UA) client;
- and
- instructions to restrict access to a controller based a user privilege, wherein the user privilege is determined by using the first and the second mappings.
Dependencies are inferred from the claim text.