Applying changeset with improved cyber security

A method including:

• receiving, by an industrial automation device, a first changeset with a first digital signature generated using a private key, wherein the first changeset includes a data package for modifying a configuration or a state of the industrial automation device;
• verifying, by the industrial automation device, the first digital signature of the first changeset based on a pre-stored public key corresponding to the private key;
• obtaining, by the industrial automation device, an approval for applying the first changeset in response to verifying the first digital signature of the first changeset, wherein the approval is obtained by finding a pre-stored approval token corresponding to the first changeset, or by receiving a user input indicating the approval;
• and
• applying, by the industrial automation device, the first changeset in response to obtaining the approval.

A non-transitory computer readable medium comprising program instructions for causing an industrial automation device to perform at least the following:

• receiving a first changeset with a first digital signature generated using a private key, wherein the first changeset includes a data package for modifying a configuration or a state of the industrial automation device;
• verifying the first digital signature of the first changeset based on a pre-stored public key corresponding to the private key;
• obtaining an approval for applying the first changeset in response to verifying the first digital signature of the first changeset, wherein the approval is obtained by finding a pre-stored approval token corresponding to the first changeset, or by receiving a user input indicating the approval;
• and
• applying the first changeset in response to obtaining the approval.

A system including at least a cloud service, an edge gateway, and an industrial automation device;

• wherein the cloud service is configured to:
• generate a first changeset for the industrial automation device, wherein the first changeset includes a data package for modifying a configuration or a state of the industrial automation device;
• generate a first digital signature for the first changeset using a private key;
• and
• transmit, to the edge gateway, the first changeset with the first digital signature;
• wherein the edge gateway is configured to:
• receive, from the cloud service, the first changeset with the first digital signature;
• and
• transmit, to the industrial automation device, the first changeset with the first digital signature;
• wherein the industrial automation device is configured to:
• receive, from the edge gateway, the first changeset with the first digital signature;
• verify the first digital signature of the first changeset based on a pre-stored public key corresponding to the private key;
• obtain an approval for applying the first changeset in response to verifying the first digital signature of the first changeset, wherein the approval is obtained by finding a pre-stored approval token corresponding to the first changeset, or by receiving a user input indicating the approval;
• and
• apply the first changeset in response to obtaining the approval.