# US 2021/0334084 A1 · Systems and methods for secure maintenance device for cyber-physical systems > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0334084 A1 - Document ID: US20210334084A1 - Status: Published application - Kind: A1 - Application number: 17/239,113 - Filed: 2021-04-23 - Published: 2021-10-28 - Earliest claimed: 2020-04-24 - Assignees: Honeywell International Inc. - Applicants: Honeywell International Inc. - Inventors: Ly VESSELS - Web page: https://patentgrep.com/patent/US20210334084A1 ## CPC - G06F 8/65: Updates (security arrangements therefor G06F21/57) - G06F 21/445: {by mutual authentication, e.g. between devices or programs} - G06F 9/45558: {Hypervisor-specific management and integration aspects} - G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints - G06F 21/51: at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability - G06F 21/565: {by checking file integrity} - G06F 21/572: {Secure firmware programming, e.g. of basic input output system [BIOS]} - H04L 9/0891: {Revocation or update of secret information, e.g. encryption key update or rekeying} - H04L 9/3247: {involving digital signatures} - H04L 41/082: the condition being updates or upgrades of network functionality - H04L 41/28: Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration - H04L 43/50: Testing arrangements - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/102: {Entity profiles} - H04L 63/123: {received data contents, e.g. message integrity} - H04L 63/166: {at the transport layer} - H04W 12/06: Authentication - G06F 2009/45587: {Isolation or security of virtual machine instances} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Systems and methods are disclosed for providing a secure and assured method for updating software of a cyber-physical system (CPS) device, maintaining a CPS device, diagnosing a CPS device, and transferring of CPS data. The method may include authenticating a moment a secure maintenance device (SMD) is connected to a first device before a software-based communication is established, establishing a secure communication channel between the SMD and the first device, authenticating a user of the first device and determining access rights of the user using an identity of the first device; transmitting digitally signed updates from the SMD to the first device; receiving, at the SMD, digitally signed first data from the first device, performing diagnostic and maintenance functions at the first device, and exporting data from the first device to the SMD for mobile transfer to another platform. ## Claims ### Claim 1 A computer-implemented method that provides a secure and assured method for updating software of a cyber-physical system (CPS) device, maintaining a CPS device, diagnosing a CPS device, and transferring of CPS data, the method comprising: authenticating a moment a secure maintenance device (SMD) is connected to a first device before a software-based communication is established; establishing a secure communication channel between the SMD and the first device; authenticating a user of the first device and determining access rights of the user using an identity of the first device; transmitting digitally signed updates from the SMD to the first device; receiving, at the SMD, digitally signed first data from the first device; performing diagnostic and maintenance functions at the first device; and exporting data from the first device to the SMD for mobile transfer to another platform. ### Claim 2 (depends on 1) The computer-implemented method of claim 1, wherein the first device is a CPS device. ### Claim 3 (depends on 1) The computer-implemented method of claim 1, further comprising encrypting and/or decrypting commands between the SMD and the first device by using existing network transport mechanism with a network protocol extension to network protocol TCP/IP. ### Claim 4 (depends on 1) The computer-implemented method of claim 1, wherein the SMD performs a diagnostic test on the first device. ### Claim 5 (depends on 1) The computer-implemented method of claim 1, further comprising creating one or more security domains that are isolated using different levels of security from each other, and enabling for support of third-party diagnostics and maintenance software. ### Claim 6 (depends on 5) The computer-implemented method of claim 5, wherein the one or more security domains comprise at least one from among a user domain, a CPS domain, and/or a vendor domain. ### Claim 7 (depends on 5) The computer-implemented method of claim 5, further comprising isolating the one or more security domains from each other using hardware virtualization technology. ### Claim 8 A system for securely maintaining, diagnosing, and updating a device while protecting the security assurance of the device, the system comprising: a memory storing instructions; and a processor executing the instructions to perform a process including: authenticating a moment a secure maintenance device (SMD) is connected to a first device before a software-based communication is established; establishing a secure communication channel between the SMD and the first device; authenticating a user of the first device and determining access rights of the user using an identity of the first device; transmitting digitally signed updates from the SMD to the first device; receiving, at the SMD, digitally signed first data from the first device; performing diagnostic and maintenance functions at the first device; and exporting data from the first device to the SMD for mobile transfer to another platform. ### Claim 9 (depends on 8) The system of claim 8, wherein the first device is a CPS device. ### Claim 10 (depends on 8) The system of claim 8, wherein the process further comprises encrypting and/or decrypting commands between the SMD and the first device by using existing network transport mechanism with a network protocol extension to network protocol TCP/IP. ### Claim 11 (depends on 8) The system of claim 8, wherein the SMD performs a diagnostic test on the first device. ### Claim 12 (depends on 8) The system of claim 8, wherein the process further comprises creating one or more security domains that are isolated using different levels of security from each other, and enabling for support of third-party diagnostics and maintenance software. ### Claim 13 (depends on 12) The system of claim 12, wherein the one or more security domains comprise at least one from among a user domain, a CPS domain, and/or a vendor domain. ### Claim 14 (depends on 12) The system of claim 12, further comprising isolating the one or more security domains from each other using hardware virtualization technology. ### Claim 15 A non-transitory computer-readable medium storing instructions that, when executed by a processor, cause the processor to perform a method for securely maintaining, diagnosing, and updating a device while protecting the security assurance of the device, the method comprising: authenticating a moment a secure maintenance device (SMD) is connected to a first device before a software-based communication is established; establishing a secure communication channel between the SMD and the first device; authenticating a user of the first device and determining access rights of the user using an identity of the first device; transmitting digitally signed updates from the SMD to the first device; receiving, at the SMD, digitally signed first data from the first device; performing diagnostic and maintenance functions at the first device; and exporting data from the first device to the SMD for mobile transfer to another platform. ### Claim 16 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the first device is a CPS device. ### Claim 17 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the method further comprises encrypting and/or decrypting commands between the SMD and the first device by using existing network transport mechanism with a network protocol extension to network protocol TCP/IP. ### Claim 18 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the SMD performs a diagnostic test on the first device. ### Claim 19 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the method further comprises creating one or more security domains that are isolated using different levels of security from each other, and enabling for support of third-party diagnostics and maintenance software. ### Claim 20 (depends on 19) The non-transitory computer-readable medium of claim 19, wherein the one or more security domains comprise at least one from among a user domain, a CPS domain, and/or a vendor domain.