Method for securing the operation of an industrial system and associated devices
AssigneeSaft
InventorStéphane ALAIMO
Life of this patent
Estimating the term…
Abstract
The invention relates to a method for securing the operation of an industrial system comprising pieces of equipment, the process comprising a phase of obtaining a digital certificate authorizing an operator to access a piece of equipment in order to carry out an action, a phase of attempting to access a piece of equipment in order to carry out an action on the piece of equipment, the attempt phase comprising, in particular, a step of authorizing access to the piece of equipment in order to carry out an action when a compliance requirement relating to the digital certificate is met or refusing access when the compliance requirement is not met.
Claims10
A method for securing the operation of an industrial system, the industrial system comprising a set of pieces of equipment and a control unit accessing the equipment, the industrial system being part of an industrial site, the industrial site being part of a group of industrial sites, the group of industrial sites comprising a single centralized control system for access rights,
- the method comprising:
- a phase of obtaining a digital certificate authorizing an operator to access at least one piece of equipment of the industrial system to carry out a predefined action, the obtaining phase comprising a step of:
- requesting a generation of a digital certificate by the centralized control system for access rights, the digital certificate being a unique and temporary digital certificate, and
- reception of the digital certificate,
- a phase of attempting to access at least one piece of equipment of the industrial system to carry out an action on said at least one piece of equipment, the attempt phase comprising a step of:
- requesting access to at least one piece of equipment of the industrial system by entering a plurality of data relating to the action to be carried out on the control unit to access the equipment, at least one of the plurality of data concerning the digital certificate,
- checking, with the control unit for access to equipment, the compliance of the access request with at least one compliance requirement, at least one compliance requirement being a compliance requirement relating to the digital certificate, and
- authorizing access to at least one piece of equipment of the industrial system to carry out the action when each compliance requirement is met or
- refusing access to the at least one piece of equipment of the industrial system when a compliance requirement is not met.
An industrial system comprising a set of pieces of equipment and a control unit for access to equipment, the industrial system being part of an industrial site, the industrial site being part of a group of industrial sites, the group of industrial sites comprising a single centralized control system for access rights, the control unit accessing equipment configured for:
- receiving a plurality of data on the control unit for access to equipment, at least one of the plurality of data relating to a digital certificate authorizing access to at least one piece of equipment of the industrial system, the digital certificate having been generated by the centralized control system for access rights, the digital certificate being a unique and temporary digital certificate, all data forming a request for access to at least one piece of equipment of the industrial system,
- checking the compliance of the access request with at least one compliance requirement, at least one compliance requirement being a compliance requirement relating to the digital certificate, and
- authorizing access to at least one piece of equipment of the industrial system when each compliance requirement is met or refusing access to at least one piece of equipment of the industrial system when a compliance requirement is not met.
A system for securing the operation of an industrial system comprising a set of pieces of equipment and a control unit accessing the equipment, the industrial system being part of an industrial site, the industrial site being part of a group of industrial sites, the group of industrial sites comprising a single centralized control system for access rights, the system for securing including a terminal used for obtaining a digital certificate authorizing access to at least one piece of equipment of the industrial system, the terminal being configured for:
- requesting the generation of a digital certificate by the centralized control system for access rights, the digital certificate being a unique and temporary digital certificate, and
- receiving the digital certificate,
- the control unit for access to equipment being configured for:
- receiving a plurality of data on the control unit for access to equipment, at least one of the plurality of data relating to the digital certificate, all data forming a request for access to at least one piece of equipment of the industrial system,
- checking the compliance of the access request with at least one compliance requirement, at least one compliance requirement being a compliance requirement relating to the digital certificate, and
- authorizing access to at least one piece of equipment of the industrial system when each compliance requirement is met or refusing access to at least one piece of equipment of the industrial system when a compliance requirement is not met.
Dependencies are inferred from the claim text.