Secure industrial control platform

A method for an overall chain-of-trust associated with an industrial control system, comprising:

• providing secure hardware, including a trusted platform module coupled to or integrated with a processor of the industrial control system to provide a hardware root-of-trust, wherein the secure boot includes an input output memory management unit and a capability to disable non-essential input output paths, including debug ports;
• providing secure firmware associated with a secure boot mechanism such that the processor executes a trusted operating system, wherein the secure boot mechanism includes one or more of a measured boot, a trusted boot, and a protected boot;
• accessing objects via secure data storage, wherein the secure data storage is associated with at least one of:
• (i) an encrypted store, and (ii) private cryptographic keys stored in the trusted platform module;
• and
• exchanging data via secure communications in accordance with information stored in the trusted platform model.

A system associated with an overall chain-of-trust for an industrial control system, comprising:

• a hardware security module;
• and
• a processor in communication with the hardware security module, wherein a secure audit trail about a firmware and software stack to be run on a processor of the industrial control system is established, wherein objects are store in secure storage of the industrial control system in accordance with the secure audit trail, and the processor is to:
• secure, in the hardware security module coupled to or integrated with the processor of the industrial control system, keys used to access the secure storage,
• boot using a secure boot process, and
• execute a trusted operating system from the software and firmware stack to configure low-level industrial control platform hardware into a known, trusted run-time environment.