# US 2021/0281663 A1 · Serial Communication Tapping and Transmission to Routable Networks

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2021/0281663 A1
- Document ID: US20210281663A1
- Status: Published application
- Kind: A1
- Application number: 17/319,420
- Filed: 2021-05-13
- Published: 2021-09-09
- Earliest claimed: 2010-09-17
- Assignees: Battelle Memorial Institute
- Applicants: Battelle Memorial Institute
- Inventors: Thomas W. Edgar; Sean J. Zabriskie; Eric Y. Choi
- Web page: https://patentgrep.com/patent/US20210281663A1

## CPC

- H04L 63/30: {for supporting lawful interception, monitoring or retaining of communications or communication related information (circuit switched telephony call monitoring H04M3/2281)}
- H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)}
- H04L 69/03: {Protocol definition or specification (protocol conformance testing H04L1/244)}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Apparatuses and methods for tapping serial communications and transforming the serial data into a format appropriate for routable networks are significant for purposes of security and troubleshooting, especially in critical infrastructure networks. Communication taps should be completely passive such that any failure would not interrupt the serial communications. Furthermore, automatic determination of unspecified serial protocol frames allow general implementation across various networks, or across devices within a single network, without the need to customize for each implementation.

## Claims

### Claim at position 1

1: An apparatus to passively tap bi-directional serial communications having serial protocol frames that are unspecified to the apparatus, the apparatus characterized by:
Passive, serial-communications, interception circuitry comprising at least two serial communications pass-throughs and a processor, each serial communications pass-through connected to the processor and interfaced to a serial communication cable through which the bi-directional serial communications are transmitted between at least two devices;
The processor executing programming to determine serial protocol frames according to characteristics of the serial communications, to wrap the serial protocol frames in a routable protocol, thereby forming a routable packet, and to transmit the routable packets to one or more routable addresses through an interface connecting the processor to a routable network.

### Claim at position 2 (depends on 1)

2: The apparatus of claim 1, further comprising a pair of serial ports directly connected to the serial communication cable and wherein the passive, serial-communications, interception circuitry has an impedance greater than that of the serial communication cable.

### Claim at position 3 (depends on 1)

3: The apparatus of claim 1, wherein each pass-through comprises an inductive coupling configured to induce a voltage in the interception circuitry in response to a current in the serial communication cable.

### Claim at position 4 (depends on 1)

4: The apparatus of claim 1, wherein each pass-through comprises a capacitive coupling.

### Claim at position 5 (depends on 1)

5: The apparatus of claim 1, wherein the characteristics of serial communications comprise timing-based signals, and the processing device executes further programming to associate timing gaps between the timing-based signals with frame edges that define the serial protocol frames.

### Claim at position 6 (depends on 1)

6: The apparatus of claim 1, wherein the characteristics of serial communications comprise frame synchronization delimiters and length fields and the processing device executes further programming to define the beginning and the length of serial protocol frames according to the frame synchronization delimiters and length fields, respectively.

### Claim at position 7 (depends on 1)

7: The apparatus of claim 1, wherein the characteristics of serial communications comprise frame synchronization delimiters and frame end delimiters and the processing device executes further programming to define the beginning and the end of serial protocol frames according to the frame synchronization delimiters and frame end delimiters, respectively.

### Claim at position 8 (depends on 1)

8: The apparatus of claim 1, wherein the characteristics of serial communications comprise time variance between signals and the processing device executes further programming to identify a baseline time gap in the signals and to define statistically significant deviations from the baseline time gap as the beginnings and the ends of serial protocol frames.

### Claim at position 9 (depends on 1)

9: The apparatus of claim 1, wherein the characteristics of serial communications comprise byte frequency and the processing device executes further programming to identify statistically significant occurrences of byte frequency patterns and to define the statistically significant occurrences with the beginnings and the ends of serial protocol frames.

### Claim at position 10 (depends on 1)

10: The apparatus of claim 1, wherein the characteristics of serial communications comprise byte frequency as well as time variance between signals and the processing device executes further programming to identify statistically significant occurrences of byte frequency patterns, to identify a baseline time gap in the signals, and to define statistically significant deviations from the baseline time gap combined with statistically significant occurrences of byte patterns as the beginnings and the ends of the serial protocol frames.

### Claim at position 11 (depends on 1)

11: The apparatus of claim 1, wherein the unspecified serial protocol frames are based on a process control serial protocol.

### Claim at position 12 (depends on 1)

12: The apparatus of claim 1, further comprising storage circuitry storing the programming, wherein the pass-throughs, the processor, the storage circuitry, and the interface are assembled as an embedded system.

### Claim at position 13

13: A method to passively tap bi-directional serial communications, which have serial protocol frames that are unspecified, transmitted through a serial communication cable between at least two devices, the method executed by a processor and characterized by the steps of:
Passively intercepting the serial communications through at least two serial communications pass-throughs connected to the processor and to the serial communication cable;
Determining serial protocol frames according to characteristics of the serial communications;
Forming routable packets by wrapping the serial protocol frames in a routable protocol; and
Transmitting the routable packets to one or more routable addresses through an interface connecting the processor to a routable network.

### Claim at position 14 (depends on 13)

14: The method of claim 13, wherein the characteristics of serial communications comprise timing-based signals, and said determining comprises associating timing gaps between the timing-based signals with frame edges that define the serial protocol frames.

### Claim at position 15 (depends on 13)

15: The method of claim 13, wherein the characteristics of serial communications comprise frame synchronization delimiters and length fields and said determining comprises defining the beginning and the length of serial protocol frames according to the frame synchronization delimiters and length fields, respectively.

### Claim at position 16 (depends on 13)

16: The method of claim 13, wherein the characteristics of serial communications comprise frame synchronization delimiters and frame end delimiters and said determining comprises defining the beginning and the end of serial protocol frames according to the frame synchronization delimiters and frame end delimiters, respectively.

### Claim at position 17 (depends on 13)

17: The method of claim 13, wherein the characteristics of serial communications comprise time variance between signals and said determining comprises to identifying a baseline time gap in the signals and defining statistically significant deviations from the baseline time gap as the beginnings and the ends of serial protocol frames.

### Claim at position 18 (depends on 13)

18: The method of claim 13, wherein the characteristics of serial communications comprise byte frequency and said determining comprises identifying statistically significant occurrences of byte frequency patterns and defining the occurrences of byte frequency patterns with the beginnings and the ends of serial protocol frames.

### Claim at position 19 (depends on 13)

19: The method of claim 13, wherein the characteristics of serial communications comprise byte frequency as well as time variance between signals and said determining comprises identifying statistically significant occurrences of byte frequency patterns, identifying a baseline time gap in the signals, and defining statistically significant deviations from the baseline time gap combined with statistically significant occurrences of byte patterns as the beginnings and the ends of the serial protocol frames.

### Claim at position 20 (depends on 13)

20: The method of claim 13, wherein the unspecified serial protocol frames are based on a process control serial protocol.
