System and method for control system cybersecurity
AssigneeSchlumberger Technology Corporation
InventorsJuan Rojas, Guillaume Tamboise
Life of this patent
Estimating the term…
Abstract
A method may include connecting a network device to a control zone of a drilling management network. The control zone may include a control system that includes a programmable logic controller that performs drilling operations. The method may further include validating that the network device is authorized to communicate with a destination device in the control zone. The method may further include reconfiguring, in response to validating the network device, the control zone to enable the network device to communicate with the destination device. The method may further include obtaining a packet from the network device. The method may further include transmitting, in response to reconfiguring the control zone, the packet to the network device.
Claims20
A method, comprising:
- connecting a network device to a control zone of a drilling management network, wherein the control zone comprises at least one control system comprising a programmable logic controller configured to perform one or more drilling operations;
- validating that the network device is authorized to communicate with a destination device in the control zone;
- reconfiguring, in response to validating the network device, the control zone to enable the network device to communicate with the destination device;
- obtaining a first packet from the network device;
- and
- transmitting, in response to reconfiguring the control zone, the first packet to the network device.
A method, comprising:
- obtaining, using a security agent operating on a network device, a software installation file from outside a control zone of a drilling management network, wherein the network device is located inside the control zone;
- obtaining, by the security agent, one or more network device conditions corresponding to the network device;
- determining, by the security agent, whether the one or more network device conditions correspond to a predetermined network state for a software installation on the network device;
- and
- executing, by the security agent, a software installation on the network device using the software update file and in response to determining that the one or more network devices correspond to the predetermined network state.
A system, comprising:
- a control system coupled to a first plurality of network elements that define a control zone, wherein the control system comprises a security agent and one or more programmable logic controllers (PLCs) configured for performing one or more drilling operations;
- a firewall device coupled to the control system;
- and
- a network device and coupled to the firewall device,
- wherein the security agent is configured to communicate with the network device through the firewall device, and
- wherein the security agent is further configured to install one or more software updates on the control system in response to communicating with the network device.
Dependencies are inferred from the claim text.