Authentication and authorization in an industrial control system using a single digital certificate

An industrial control system comprising:

• a first industrial device;
• a digital certificate comprising authentication information and authorization information associated with the first industrial device;
• and
• a second industrial device configured to
• receive the digital certificate from the first industrial device,
• extract the authorization information from the digital certificate, and
• authorize the first industrial device to access the second industrial device based on the authorization information extracted.

A computer-implemented method of performing access control comprising:

• generating a digital certificate for a first device that includes authentication information and authorization information associated with the first device;
• establishing a connection between the first device and a second device;
• transmitting the digital certificate from the first device to the second device;
• authenticating the first device based on the authentication information of the digital certificate;
• and
• authorizing the first device to access the second device based on the authorization information of the digital certificate.