# US 2019/0317481 A1 · Firewall System and Method for Establishing Secured Communications Connections to an Industrial Automation System > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2019/0317481 A1 - Document ID: US20190317481A1 - Status: Published application - Kind: A1 - Application number: 16/316,845 - Filed: 2017-06-27 - Published: 2019-10-17 - Earliest claimed: 2016-07-12 - Assignees: Siemens Aktiengesellschaft - Applicants: Siemens Aktiengesellschaft - Inventors: Karl GLAS; Sven GOTTWALD - Web page: https://patentgrep.com/patent/US20190317481A1 ## CPC - G05B 19/4185: {characterised by the network communication} - H04L 63/0227: {Filtering policies (mail message filtering H04L51/212)} - H04L 63/0263: {Rule management} - H04L 63/0272: {Virtual private networks} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/101: {Access control lists [ACL]} - G05B 2219/25205: Encrypt communication - H04L 63/0281: {Proxies} - Y02P 90/02: Total factory control, e.g. smart factories, flexible manufacturing systems [FMS] or integrated manufacturing systems [IMS] - G05B: CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS (systems for controlling or regulating non-electric variables G05D; systems for regulating electric or magnetic variables G05F; control devices or systems insofar as characterised by mechanical features only G05G) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - Y02P: CLIMATE CHANGE MITIGATION TECHNOLOGIES IN THE PRODUCTION OR PROCESSING OF GOODS ## Abstract A connection management device for establishing secured communications connections to an industrial automation system, wherein the device provides, in cases of a positive authorization verification outcome, access control information for establishing an encrypted communication connection between a first communication unit of a requesting user and a selected second communication unit, where the connection management device is formed by a server instance running on a firewall system, where data packets transmitted via an encrypted communications connection between the first communication unit of the requesting user and the selected second communication unit are encrypted for verification by the firewall system, based on specified security rules and, in cases of a successful verification, the data packets are forwarded encrypted to the first communication unit of the requesting user or to the selected second communication unit. ## Claims ### Claim at position 1 -11. (canceled) ### Claim 12 A method for establishing secured communications connections to an industrial automation system in which communications connections are set up from first communications devices outside of the industrial automation system to second communications devices assigned to the industrial automation system via a connection management device, the communications connections established via the connection management device between first communications devices and second communications devices being Virtual Private Network (VPN) connections, the connection management device being formed by a server instance running on a firewall system, and data packets transmitted via an encrypted communications connection between the first communication device of the requesting user and the selected second communication device being decrypted for a verification by the firewall system based on defined security rules, the method comprising: performing, by the connection management device, an authorization verification for a requesting user based on an access control list in an event of a request to set up a connection to a selected second communication device by a requesting user of a first communication device, the authorization verification comprising an authentication of the requesting user against the connection management device; providing, by the connection management device, access control information for establishing an encrypted communications connection between the first communication device of the requesting user and the selected second communication device for these communication devices in an event of a positive authorization verification outcome, the connection management device providing access control information to the requesting user regarding a use of a VPN connection between the first communication device of the requesting user and the selected second communication device only after an authentication of the requesting user, and the access control information items comprising passwords for VPN sessions or temporarily valid passwords; forwarding, the firewall system, data packets successfully verified based on defined security rules in encrypted form to at least one of (i) the first communication device of the requesting user and (ii) the selected second communication device, the verification by the firewall system based on the defined security rules comprising a verification of a correctness of passwords for VPN sessions or temporarily valid passwords; and rejecting, by the firewall system, data packets for the transmission of which incorrect passwords have been specified. ### Claim 13 (depends on 12) The method as claimed in claim 12, wherein the access control list comprises user-specific information about each permissible communication connection between at least one first communication device and at least one second communication device. ### Claim 14 (depends on 12) The method as claimed in claim 12, wherein in cases of a positive authorization verification outcome, the connection management device provides an encrypted communications connection to the first communication device of the requesting user and to the selected second communication device and links these communications connections to each other. ### Claim 15 (depends on 14) The method as claimed in claim 14, wherein in cases of a positive authorization verification outcome, the connection management device provides an encrypted communications connection to the first communication device of the requesting user and to the selected second communication device and links these communications connections to each other. ### Claim 16 (depends on 12) The method as claimed in claim 12, wherein the data packets transmitted via the encrypted communications connection between the first communication device of the requesting user and the selected second communication device are decrypted by the firewall system and are verified based on the defined security rules; and wherein data packets to be forwarded that are successfully verified based on the defined security rules are encrypted by the firewall system. ### Claim 17 (depends on 13) The method as claimed in claim 13, wherein the data packets transmitted via the encrypted communications connection between the first communication device of the requesting user and the selected second communication device are decrypted by the firewall system and are verified based on the defined security rules; and wherein data packets to be forwarded that are successfully verified based on the defined security rules are encrypted by the firewall system. ### Claim 18 (depends on 14) The method as claimed in claim 14, wherein the data packets transmitted via the encrypted communications connection between the first communication device of the requesting user and the selected second communication device are decrypted by the firewall system and are verified based on the defined security rules; and wherein data packets to be forwarded that are successfully verified based on the defined security rules are encrypted by the firewall system. ### Claim 19 (depends on 16) The method as claimed in claim 16, wherein at least one of (i) a decryption of data packets and (ii) an encryption of data packets is performed by the firewall system in hardware. ### Claim 20 (depends on 12) The method as claimed in claim 12, wherein the defined security rules comprise at least one of (i) firewall rules and (ii) rules relating to an admissibility of at least one of control commands and control parameters for automation devices specified in data packets. ### Claim 21 (depends on 12) The method as claimed in claim 12, wherein the firewall system rejects data packets that do not comply with the defined security rules. ### Claim 22 (depends on 12) The method as claimed in claim 12, wherein the firewall system is arranged in a secured communication network of the industrial automation system. ### Claim 23 (depends on 12) The method as claimed in claim 12, wherein the connection management device is a rendezvous server. ### Claim 24 (depends on 12) The method as claimed in claim 12, wherein the second communication devices are integrated into automation devices or assigned to said automation devices. ### Claim 25 A firewall system comprising: a processor; memory operatively coupled to said processor; wherein the firewall system is configured to: verify data packets based on specified security rules; process at least one server instance forming a connection management device which is configured to establish a communications connection from first communication devices outside of an industrial automation system to second communication devices assigned to the industrial automation system; wherein the communications connections established via the connection management device between first communications devices and second communications devices are Virtual Private Network (VPN) connections; wherein the connection management device is further configured, in an event of a request, to set up a connection to a selected second communication device by a requesting user of a first communication device, and is further configured to perform an authorization verification for the requesting user based on an access control list, the authorization verification comprising an authentication of the requesting user against the connection management device; wherein the connection management device is additionally configured, in the event of a positive authorization verification outcome, to provide access control information for establishing an encrypted communications connection between the first communication device of the requesting user and the selected second communication device for these communication devices; wherein the connection management device is additionally configured to provide access control information to the requesting user regarding use of a VPN connection between the first communication device of the requesting user and the selected second communication device only after an authentication of the requesting user, the access control information items comprising passwords for VPN sessions or temporarily valid passwords; and wherein the firewall system is further configured to: decrypt data packets transmitted via an encrypted communications connection between the first communication device of the requesting user and the selected second communication device for the verification based on defined security rules; and forward data packets successfully verified based on the defined security rules in encrypted form to the first communication device of the requesting user or to the selected second communication device, the verification by the firewall system based on the defined security rules comprising a verification of the correctness of passwords for VPN sessions or temporarily valid passwords, and reject data packets, for the transmission of which incorrect passwords have been specified.