Protecting network data of rugged firewalls during physical intrusions of operational technology (ot) devices
AssigneeFortinet, Inc.
InventorGerardo Andrés Mendel
Life of this patent
Estimating the term…
Abstract
A rugged firewall of an OT device includes sensitive network data stored on a memory device. A current GPS position of an OT device is determined, and a tolerable deviation in GPS position is received for the OT device from the current GPS position as defined by a network security policy. A violation of the tolerable deviation is detected in the OT device from the current GPS position. In response to the detected violation, a security action involving a self-reset is taken to destroy network data in the rugged firewall of the OT device.
Claims15
A computer-implemented method in a rugged firewall device for protecting against compromise of network data during physical intrusions of operational technology (OT) devices, the method comprising the steps:
- storing network data for the rugged firewall on a memory device;
- determining a current global positioning satellite (GPS)_ position of an OT device;
- receiving a tolerable deviation in GPS position for the OT device from the current GPS position as defined by a network security policy;
- detecting in real-time a violation of the tolerable deviation in the OT device from the current GPS position;
- and
- in response to the detected violation, taking security action involving a self-reset to factory default to destroy the network data of the rugged firewall.
A non-transitory computer-readable medium in a rugged firewall device, on a data communication network, storing code that when executed, performing a method protecting against compromise of network data during physical intrusions of operational technology (OT) devices, the method comprising:
- storing network data for the rugged firewall on a memory device;
- determining a current GPS position of an OT device;
- receiving a tolerable deviation in GPS position for the OT device from the current GPS position as defined by a network security policy;
- detecting in real-time a violation of the tolerable deviation in the OT device from the current GPS position;
- and
- in response to the detected violation, taking security action involving a self-reset to factory default to destroy the network data of the rugged firewall.
A network security device, on a data communication network, for protecting against compromise of network data during physical intrusions of operational technology (OT) devices, the network security device comprising:
- a processor;
- a network interface communicatively coupled to the processor and to a data communication network;
- a flash memory, communicatively coupled to the network interface and storing network data and
- a memory, communicatively coupled to the processor and comprising:
- a GPS sensor to determine a current GPS position of an OT device;
- a network policy module to receive a tolerable deviation in GPS position for the OT device from the current GPS position as defined by a network security policy;
- an intrusion detector to detect in real-time a violation of the tolerable deviation in the OT device from the current GPS position;
- and
- a security action module to, in response to the detected violation, take security action involving a self-reset to factory default to destroy the network data of the rugged firewall.
Dependencies are inferred from the claim text.