Whitelisting for hart communications in a process control system
AssigneeFisher-Rosemount Systems, Inc.
InventorsGary K. Law, Sergio Diaz, Godfrey R. Sherriff, Marcos Peluso, Scott N. Hokeness
Life of this patent
Estimating the term…
Loading patent…
AssigneeFisher-Rosemount Systems, Inc.
InventorsGary K. Law, Sergio Diaz, Godfrey R. Sherriff, Marcos Peluso, Scott N. Hokeness
Estimating the term…
A cybersecurity system for use in a process plant provides whitelisting of device specific and common practice HART read commands in process controllers and safety controllers to perform communications in a process plant that are very secure, but that still enable the implementation of advanced functionality provided in HART devices. A whitelist implementation application applies one or more whitelists in a security gateway device to determine if messages, such as HART messages, should be allowed or processed. A whitelist learning application automatically creates and configures whitelists through the use of a lock/learn mode, and a whitelist configuration application discovers Device Specific and Common Practice HART commands by issuing device description requests to specific devices, parsing the response, and communicating the whitelist configuration information with the parsed command types to the relevant process controllers and safety controllers for use in the whitelists. A user interface enables users to interact with and guide the configuration process to provide for a highly secure system that still enables the diagnostic and other high level functionality of field devices in a process plant.
A computer-implemented method of performing security in a process plant communication network, the method executed by one or more processors contained in a device having a communication interface coupled to the communication network, and programmed to perform the method, the method comprising:
A process control device, comprising:
Dependencies are inferred from the claim text.