Rapid Configuration Security System for Industrial Control Infrastructure
AssigneeRockwell Automation Technologies, Inc.
InventorsSujeet Chand, David A. Vasko, Brian J. McMullen, Daniel B. Seger
Life of this patent
Estimating the term…
Abstract
A template for implementing a control system with security features provides a generic control program and device programs for distribution to industrial controller and associated control devices together with matching security programs for distribution to the control devices, the security program providing for the generation of security thumbprints indicating the state of the control devices. The template may also be associated with a security-monitoring program that can receive and process the security thumbprints.
Claims20
An electronic computer having a processor executing a program stored in a non-transient medium and a security template stored in anon-transitory medium, the security template comprising:
- a generic control program executable by an industrial controller for implementing a generic control system in coordination with multiple different control devices connectable to actuators and sensors through I/O points;
- and
- a security table providing entries associated with each of the control devices, each entry providing for a control device:
- (a) a device program executable by the control device for implementing a portion of the generic control system, the device program including generic names for the I/O points;
- and
- (b) a security program executable by the control device for generating a security thumbprint of the control device when executing the device program, the security thumbprint providing a compression of a state of the control device when implementing the device program, the state reflecting each of:
- (i) operating software of the control device describing operation of the control device and executable by the control device;
- (ii) configuration data defining a configuration of the control device, and
- (iii) environmental data defining an operating environment of the control device measurable by the control device.
An electronic computer having a processor executing a program stored in anon-transient medium operable to:
- (I) receive a security template stored in the non-transient medium, the security template including:
- a generic control program executable by an industrial controller for implementing a generic control system in coordination with multiple different control devices connectable to actuators and sensors through I/O points;
- and
- a security table providing entries associated with each of the control device, each entry providing for a control device:
- (a) a device program executable by the control device for implementing a portion of the generic control system, the device program including generic names for the I/O points;
- (b) a security program executable by the control device for generating a security thumbprint of the control device when executing the device program, the security thumbprint providing a compression of a state of the control device when implementing the device program, the state reflecting each of:
- (i) operating software of the control device describing operation of control device and executable by the control device;
- (ii) configuration data defining a configuration of the control device, and
- (iii) environmental data defining an operating environment of the control device measurable by the control device;
- (II) accept input from a user to link the generic names for the 1/O points to hardware I/O points of a physical control system;
- and
- (III) transfer the generic control program to the industrial controller and the device programs and security programs to the associated control devices for execution thereon.
Dependencies are inferred from the claim text.